Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa
File:                     d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa (raw, json)
Hash identifier:          +6HwDdXNQ6EIpjBA8Ck6yhCTHEe+hpcBwvQ5I70aic4=
Subject key identifier:   8C:84:83:EC:C8:07:00:9D:35:D4:78:8F:ED:D7:8F:7A:EE:26:21:D6
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A366EB7B1321B7095D08100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa
Signing time:             Mon 23 Jun 2025 19:40:15 +0000
ROA not before:           Mon 23 Jun 2025 19:40:15 +0000
ROA not after:            Sun 21 Sep 2025 19:40:15 +0000
asID:                     20001
IP address blocks:        172.96.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:36:6e:b7:b1:32:1b:70:95:d0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 19:40:15 2025 GMT
            Not After : Sep 21 19:40:15 2025 GMT
        Subject: CN=0ef359fd-5df8-425a-b34b-f5d10f250131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:5c:b8:08:40:78:99:8f:43:9e:4e:49:bf:
                    49:b3:5b:05:d8:12:fd:4a:f3:ea:d8:d7:48:ac:a6:
                    35:ef:f2:10:bc:d6:f0:dd:26:cd:e4:72:fd:9a:96:
                    d9:2b:a9:0b:d3:6e:fa:fa:a0:f5:65:24:61:37:3c:
                    22:db:5f:a6:44:ae:97:12:1b:50:0c:e9:c7:04:90:
                    24:d0:20:82:e1:30:de:99:6a:b9:6b:10:64:c1:dd:
                    cc:2c:ae:73:41:e4:2f:39:2d:75:ba:a4:be:65:9a:
                    67:69:ce:f8:e5:8a:f1:c2:59:dd:ca:b9:ff:da:26:
                    84:33:75:84:20:db:c9:13:86:0a:5b:b1:67:87:57:
                    cd:58:7b:cf:64:b7:dc:bb:e8:ec:02:c9:f8:8d:b9:
                    28:39:14:78:e7:7d:4b:8a:c2:11:a0:cf:5c:7a:e0:
                    56:1b:0a:32:eb:1b:b8:bc:48:a6:94:ea:0c:7c:b9:
                    90:01:c7:87:97:22:99:25:dc:1d:48:59:12:de:0d:
                    28:19:dc:3b:c0:e5:46:56:19:55:3b:af:91:7f:b5:
                    8b:12:a1:99:47:fa:f0:c4:8d:42:d7:4b:5d:88:c0:
                    88:19:d0:eb:9b:3b:f3:b7:25:53:96:b1:81:ab:38:
                    06:8e:83:27:df:b6:ea:b4:25:67:ea:a7:2f:dc:50:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:83:EC:C8:07:00:9D:35:D4:78:8F:ED:D7:8F:7A:EE:26:21:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5168aed-9e88-395e-a9e4-21f68cbb1f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:46:26:3a:14:74:c4:fc:61:79:f9:c8:33:e8:e2:10:40:
         39:8c:42:67:ec:60:cf:01:a9:f0:f8:81:89:9b:2f:07:5b:16:
         58:67:bc:43:5a:6e:e9:bc:8c:6a:1c:4a:a8:86:6c:7c:87:ef:
         aa:2b:2e:d6:f5:03:b0:9c:60:33:fb:1e:31:26:75:b0:52:2d:
         b1:a0:2d:b8:81:ce:89:bb:36:40:2e:17:51:d6:f4:ef:80:28:
         fe:72:3f:df:0c:b6:f1:c8:8d:d9:0c:25:7e:ac:c0:96:79:03:
         54:9c:bd:c9:5f:c4:84:2f:32:16:29:48:3d:47:a3:03:4a:ad:
         fb:f3:26:13:61:b5:b3:01:0e:0b:4d:ff:1c:ca:75:61:50:51:
         18:bf:f1:9d:19:35:73:c1:35:65:89:80:46:eb:fc:42:4a:1e:
         0c:36:f3:61:cf:d1:9c:10:05:87:d6:9c:be:8d:7b:75:f8:06:
         e1:2c:10:f5:1d:8f:a7:af:bf:77:70:97:34:45:36:1b:94:dd:
         05:d2:d7:79:fa:48:21:47:d6:a8:ba:7e:75:d3:e1:9c:36:ab:
         b5:07:48:b0:bf:fb:91:a9:22:b6:b3:1d:9c:d2:53:3d:fb:1f:
         18:7e:ff:3a:98:55:82:b1:c0:a8:7b:ea:80:00:6f:d3:5e:d3:
         d8:d8:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:24:43 2025 by rpki-client