Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa
File:                     d8e500c6-8500-3075-a547-1d20cb1975d1.roa (raw, json)
Hash identifier:          HGld5Zr8x/+D3L8+19TTZpxxCMLoamT8RstGR16YwC8=
Subject key identifier:   BF:0C:53:E6:5C:42:D5:15:8C:01:42:01:7C:77:F8:47:DB:43:C0:AF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A0F573749FB4F0B750F2B80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa
Signing time:             Mon 23 Jun 2025 18:21:29 +0000
ROA not before:           Mon 23 Jun 2025 18:21:29 +0000
ROA not after:            Sun 21 Sep 2025 18:21:29 +0000
asID:                     20001
IP address blocks:        168.91.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:0f:57:37:49:fb:4f:0b:75:0f:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 18:21:29 2025 GMT
            Not After : Sep 21 18:21:29 2025 GMT
        Subject: CN=5214a7dc-23c9-428b-a45a-5016285461f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:12:7d:fd:de:06:88:5a:a9:ff:ce:7a:8f:
                    74:9b:df:88:25:b2:05:20:7b:f5:ca:11:8c:75:96:
                    6e:ae:60:2c:45:54:f0:ee:dc:47:f9:9e:fe:40:df:
                    7d:e8:ca:c4:9d:c9:8a:6c:80:5d:16:a8:3a:73:ad:
                    bc:ca:38:b2:42:8f:2b:d2:90:55:cd:88:07:b1:72:
                    f3:6e:71:7f:3e:24:dd:36:f0:37:3d:8a:93:70:60:
                    ec:2b:87:77:41:e1:00:c2:26:5a:c3:a0:73:42:4d:
                    f0:95:67:04:ca:27:17:74:ef:ba:d7:a4:b4:25:29:
                    35:7c:75:f3:3f:c2:7b:fc:44:2e:ce:09:8b:6a:fe:
                    e3:6f:79:c5:61:37:99:e3:42:80:99:c6:cf:43:37:
                    3a:c4:06:cd:29:9f:f2:df:f2:15:ba:9e:46:98:14:
                    b8:e0:4f:e2:d9:a0:64:b4:22:d2:df:62:df:6e:f1:
                    b0:91:0c:7b:72:e9:99:ce:f6:1a:02:b1:13:1c:05:
                    b6:d3:ca:bb:c4:b1:8e:73:b4:53:b5:55:ef:61:51:
                    12:13:2a:d1:5b:f2:1c:ef:00:eb:32:4e:be:a8:f0:
                    59:ea:05:61:61:97:8d:c6:8e:fd:26:8e:c9:2b:d7:
                    ca:bd:04:75:e5:2c:b0:5b:30:71:3d:dd:7e:30:0b:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:53:E6:5C:42:D5:15:8C:01:42:01:7C:77:F8:47:DB:43:C0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d8e500c6-8500-3075-a547-1d20cb1975d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:82:b6:ec:77:9e:dc:03:d0:97:61:83:fe:69:69:0a:11:
         2f:f6:87:3a:d5:bd:b2:e0:3a:44:2f:1c:0a:68:6e:32:ee:e5:
         ea:eb:b7:4a:f8:94:1b:83:aa:c8:a7:bb:e6:c0:e8:d3:87:1a:
         ea:b8:da:c1:f5:3d:ac:80:68:09:18:02:50:b9:b2:f0:36:10:
         6b:00:a7:73:76:17:b6:dd:88:fa:65:a1:63:84:20:84:39:99:
         9d:af:a4:f3:03:f9:cd:f1:20:ca:bb:00:44:58:d2:7f:4e:fe:
         6b:78:ef:4a:bd:61:3e:08:66:4e:b9:51:4c:0f:f0:a5:d3:a9:
         12:d7:31:23:95:1b:83:b4:1b:b5:e7:f3:11:4d:c3:43:88:12:
         7f:c2:75:3f:45:a3:b5:d5:98:8d:ac:e7:08:dc:07:0d:30:b3:
         f7:04:4d:16:d1:75:fe:49:07:51:b7:cf:af:72:72:eb:99:ad:
         40:bb:8f:d2:0c:20:2a:de:7d:db:4c:14:c3:7d:e9:61:56:3e:
         19:68:67:72:71:da:7a:86:8d:48:55:d6:da:f5:2f:93:6f:22:
         c4:81:97:4a:ca:41:53:b6:10:a6:0b:6c:cb:25:5e:9f:94:99:
         4f:eb:e0:a9:0f:1b:85:c7:80:88:09:e8:16:d8:a4:36:f3:c5:
         1d:58:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:13:14 2025 by rpki-client