Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1a173b6-9a0e-37da-977d-b6ac0f48f1f1.roa
File:                     b1a173b6-9a0e-37da-977d-b6ac0f48f1f1.roa (raw, json)
Hash identifier:          rTSuN+LKMg2+wh/IVYjgigW7G1pEq42Xr61Q0MsrVmc=
Subject key identifier:   9A:B3:96:30:90:7E:56:E1:01:49:50:60:BA:3F:75:5C:1C:B2:07:49
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B8BE228279C4605C8DE549280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1a173b6-9a0e-37da-977d-b6ac0f48f1f1.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     7018
IP address blocks:        69.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:28:27:9c:46:05:c8:de:54:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=4c05d33f-6244-457f-be04-f4ce99d5efd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:18:93:83:95:51:c5:dc:8e:ef:ab:ec:da:
                    01:43:72:8c:35:58:a4:04:2e:84:9f:03:28:16:06:
                    3b:8f:da:87:2d:c4:8e:33:64:87:b8:5e:3d:21:94:
                    8d:49:44:ec:c5:34:08:6b:15:03:f9:84:4e:71:5c:
                    46:13:07:aa:f5:69:cf:7a:bd:92:fc:62:12:8f:5c:
                    20:0b:74:46:22:e7:bf:a2:c1:5b:62:3d:15:e8:23:
                    37:8b:d4:3f:54:17:1e:03:82:c9:db:d3:9c:fb:79:
                    9d:54:2a:a6:b3:d2:15:56:17:b1:81:bc:5f:bf:ae:
                    bc:67:72:b1:41:46:30:aa:bf:02:b2:56:ff:ad:98:
                    64:4a:92:cc:11:0a:a7:e9:f2:4e:97:5b:0f:1c:42:
                    40:3c:53:9b:29:41:29:f0:6c:50:54:64:ec:d4:ed:
                    fe:d8:cc:39:71:f4:c5:a4:e5:74:51:ed:cc:78:8f:
                    ee:02:e2:b8:b0:a1:12:b6:50:32:ae:37:74:5f:0b:
                    5c:2c:3c:66:15:dd:c9:67:59:d8:46:f4:d3:62:b4:
                    93:e8:2e:d7:ab:0b:9f:ee:2f:a4:69:44:fa:67:83:
                    3e:3f:e0:6f:88:3b:15:62:94:dd:1d:ff:80:bc:82:
                    51:48:13:ef:34:66:c0:06:3a:7b:94:ac:d1:51:53:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B3:96:30:90:7E:56:E1:01:49:50:60:BA:3F:75:5C:1C:B2:07:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1a173b6-9a0e-37da-977d-b6ac0f48f1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:a2:cb:44:d5:cb:92:d9:5d:b1:9d:fc:06:58:15:c1:38:
         c9:34:07:3e:91:f9:70:54:1f:27:2f:7d:56:f2:33:e8:0c:00:
         6f:be:41:67:ac:3c:7b:e7:e9:68:28:c5:f4:fc:26:3c:d5:27:
         d8:4d:8c:d7:1c:5e:b3:a2:bc:37:a6:67:86:7e:ea:1a:cb:82:
         bb:53:a8:8f:12:89:1f:84:9b:2e:13:2e:0b:ab:be:bf:46:18:
         f0:b3:2b:dd:56:75:93:0c:42:aa:f8:53:7b:70:bc:cf:4f:bd:
         2c:7b:fc:59:1a:85:5d:7f:fe:be:63:8d:02:be:67:5b:0f:fd:
         7a:67:0a:d4:b4:00:c4:82:10:b4:28:84:6d:86:d4:d5:c8:81:
         27:ed:c8:07:f5:9a:b4:ce:51:cd:75:46:52:7d:72:0d:ba:3a:
         b4:d9:08:42:72:b4:7b:e4:be:a7:56:8e:ef:a4:56:80:ff:00:
         2e:15:54:02:8a:d0:6e:1d:4d:cb:35:aa:3d:e4:cb:0f:8c:9a:
         2a:8d:b6:1a:65:fd:ae:b4:9c:d6:05:c2:10:b9:dc:43:ca:0e:
         2b:cc:d3:98:61:70:fc:46:f8:4e:c2:81:f8:e1:d7:55:e9:2e:
         c3:67:23:58:05:e1:d4:a4:ba:84:0f:7a:3a:14:34:b6:28:5c:
         db:8f:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:28 2025 by rpki-client