Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccf1e24-3dc5-33a0-80a9-529a56077b13.roa
File:                     bccf1e24-3dc5-33a0-80a9-529a56077b13.roa (raw, json)
Hash identifier:          B2mmLAl7hw1kmwTJNJT8LY3ttPvV1nxArpwhjDWjvMk=
Subject key identifier:   DA:F3:42:E3:5C:CD:3C:DD:B7:54:11:04:26:FB:D8:94:FE:51:CE:B5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C580787AF22BD622B6380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccf1e24-3dc5-33a0-80a9-529a56077b13.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        152.44.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:58:07:87:af:22:bd:62:2b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=c1cc9a94-0a96-42cd-8f5f-cc4353a0f1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ef:6a:d4:d4:15:cc:08:55:4e:4c:f2:29:b8:
                    e7:51:a2:3a:0f:0f:d7:79:b8:05:43:7a:c9:2d:de:
                    50:16:1a:34:b7:ce:f7:0a:1d:c6:71:af:57:5c:cf:
                    83:18:56:e8:fd:c7:6f:58:49:23:0e:dc:0a:f6:a6:
                    ff:5e:bc:d9:da:49:0d:fa:29:98:1e:59:b2:99:67:
                    c9:ff:c9:b9:22:e5:61:21:c8:83:18:2f:f9:80:33:
                    95:a0:9c:64:b5:6a:83:d8:fe:9d:0e:c2:87:d5:4f:
                    69:33:a6:ed:2f:41:db:06:e9:36:ff:df:58:b3:22:
                    20:57:b5:2c:9f:75:fe:74:a9:9e:38:6f:16:28:32:
                    6c:51:68:9d:db:5e:77:8f:44:d2:2f:b1:fb:93:d1:
                    fe:28:82:0b:8f:e2:a9:ab:1f:88:4d:80:11:03:70:
                    59:2e:d6:a2:2f:83:8c:54:e9:dd:aa:48:37:09:75:
                    aa:b1:bf:06:10:27:aa:b8:4e:c9:db:e8:d1:5c:25:
                    49:5b:38:75:30:c8:53:4a:e4:07:e0:cc:b3:64:73:
                    9a:ee:4c:5a:6b:fb:5a:34:16:7b:81:de:3d:93:25:
                    5c:86:e7:65:c6:f2:7b:61:02:84:a1:ba:ca:36:64:
                    56:39:50:b0:85:80:35:a4:ab:20:11:85:83:25:5b:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F3:42:E3:5C:CD:3C:DD:B7:54:11:04:26:FB:D8:94:FE:51:CE:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccf1e24-3dc5-33a0-80a9-529a56077b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:40:13:57:50:b8:a0:49:56:81:dc:ed:ae:0b:83:db:ea:
         9e:16:dd:f1:71:6f:37:f7:76:61:09:41:04:be:48:ea:3a:09:
         a8:77:97:23:31:94:50:0d:75:b3:12:c9:e8:e5:9b:04:0a:a3:
         03:36:72:1e:62:c6:79:0c:30:72:7f:b0:31:0e:92:fb:65:c4:
         a7:ba:3a:8f:f2:f6:cd:cf:28:eb:9c:bf:d5:30:23:6f:94:1d:
         61:92:f0:0f:40:de:cc:6a:73:4a:ea:dd:5e:fc:e3:79:5a:94:
         0e:ab:75:7d:31:96:18:c4:79:f1:f2:8c:5b:9e:b9:2b:ae:2b:
         2f:ba:58:71:59:b4:60:a9:b1:f8:44:fa:38:bc:8d:44:99:84:
         c8:96:9f:f3:16:da:1e:b6:da:a9:09:5b:e7:bb:2d:fd:97:54:
         96:8d:ed:c6:eb:e6:63:a2:b9:85:60:f7:9a:e7:81:1a:56:53:
         76:74:d8:0e:ff:c4:38:f2:7a:6c:f4:89:b1:d8:73:c4:88:61:
         fb:93:32:e6:da:4a:34:18:c2:3c:99:88:3d:69:db:13:b4:af:
         0c:ea:7c:f4:9b:39:81:72:d0:22:65:08:1f:a7:8e:e9:52:49:
         e6:10:59:91:20:16:79:70:90:1b:02:62:ca:db:78:cb:89:ac:
         60:36:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:00:52 2025 by rpki-client