Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa
File:                     df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa (raw, json)
Hash identifier:          J4xPj7M18hd3d8JEFjQvXIGRGZPP7S40AjIUhk8wK28=
Subject key identifier:   20:EB:7D:2A:A6:61:51:BF:17:BD:32:5E:98:54:61:FC:75:01:D4:9E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B8BE2284E0E4B9394DC453F20
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     7018
IP address blocks:        208.89.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:28:4e:0e:4b:93:94:dc:45:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=eee5f453-0d20-41b3-895a-102aefabab39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:d4:a6:6f:10:bc:70:1c:06:a2:2c:af:13:
                    0c:1d:be:f3:f1:f1:13:d6:4c:bf:7e:07:a7:8a:b7:
                    a4:2a:e3:11:af:80:4f:75:24:cc:d1:f6:85:e6:34:
                    07:be:71:31:aa:98:32:8d:d7:de:c4:ea:13:9b:78:
                    7d:7f:d8:52:65:ea:fd:d6:95:86:83:47:d7:c7:e0:
                    2c:40:e4:96:8b:e6:31:d6:74:d9:e9:e7:e2:0e:4d:
                    3c:fc:4c:45:a7:c2:20:0a:2e:f1:6e:b2:31:89:91:
                    f4:b0:f2:4e:96:de:1d:ea:51:a7:5b:be:c5:f6:fe:
                    2c:68:23:0d:6f:a3:cb:29:24:48:7e:45:7f:30:17:
                    40:60:0a:00:a7:bc:dd:db:2b:08:d5:b4:f9:3d:51:
                    46:51:e2:3f:aa:c3:46:7d:df:94:c4:0d:42:a1:06:
                    3a:d1:c1:d9:a6:bf:bb:ab:48:4c:d1:ea:66:24:c3:
                    4a:96:18:bf:be:37:2e:5d:bb:fe:a6:77:bd:f8:39:
                    41:3a:3a:3f:24:df:33:7a:1a:f6:5d:5d:ef:46:53:
                    d1:27:5a:7c:58:e9:b4:f4:49:c3:4c:68:d3:4e:bd:
                    e6:89:2d:36:88:fa:99:26:7b:09:6a:32:02:45:44:
                    23:73:f3:55:9d:b6:b2:c3:cc:a8:09:c3:9a:d9:ac:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EB:7D:2A:A6:61:51:BF:17:BD:32:5E:98:54:61:FC:75:01:D4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0ddb94-bc88-3d72-85c2-8c7c340697fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:67:51:5c:17:9d:25:d2:d2:a8:46:fd:d2:8b:ef:e7:ef:b4:
         cb:bf:be:d8:6c:5e:08:f9:41:ca:31:56:34:2b:ba:d4:2a:b6:
         be:63:b8:ca:f0:85:02:77:bb:63:e8:22:ae:fd:89:09:56:02:
         9c:46:25:a5:a4:ec:c0:6f:20:8d:55:58:51:7d:80:b1:a3:ba:
         54:db:8b:97:05:c1:d7:1b:86:c6:3b:ab:ba:8d:72:77:85:eb:
         51:9c:6f:c8:6b:77:04:cd:71:41:9b:fe:c6:19:ed:af:da:9b:
         56:18:8a:68:0c:b7:f5:3d:85:31:cf:2f:9c:79:2f:da:bf:f2:
         08:9c:08:bd:a5:ce:18:d6:06:3e:32:71:f9:9c:38:c9:a9:7c:
         4e:64:84:ed:33:46:05:a3:bb:09:70:41:a7:37:fc:ad:1d:97:
         a0:df:01:80:ce:5b:5c:f8:48:8b:13:26:ec:55:e0:d6:46:8d:
         cc:0d:e7:7a:4f:44:a0:cf:25:6e:34:2e:7d:fc:20:5f:0e:d2:
         c3:5e:39:5f:4c:ee:c3:a8:d4:d8:7a:79:29:f2:d5:d9:a5:f4:
         4e:79:21:b4:c2:a8:37:9e:08:de:cd:7e:8f:7c:ee:2c:7e:72:
         83:d1:6e:2b:ed:66:c6:01:e9:23:5d:a1:88:d1:f9:67:73:15:
         e6:fb:1a:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ihODkuTlNxFPyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZWVlNWY0NTMtMGQyMC00MWIzLTg5NWEtMTAyYWVmYWJhYjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsafUpm8QvHAcBqIsrxMMHb7z8fET1ky/fgen
irekKuMRr4BPdSTM0faF5jQHvnExqpgyjdfexOoTm3h9f9hSZer91pWGg0fXx+As
QOSWi+Yx1nTZ6efiDk08/ExFp8IgCi7xbrIxiZH0sPJOlt4d6lGnW77F9v4saCMN
b6PLKSRIfkV/MBdAYAoAp7zd2ysI1bT5PVFGUeI/qsNGfd+UxA1CoQY60cHZpr+7
q0hM0epmJMNKlhi/vjcuXbv+pne9+DlBOjo/JN8zehr2XV3vRlPRJ1p8WOm09EnD
TGjTTr3miS02iPqZJnsJajICRUQjc/NVnbayw8yoCcOa2awREwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDrfSqmYVG/F70yXphUYfx1AdSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZGYwZGRiOTQtYmM4OC0z
ZDcyLTg1YzItOGM3YzM0MDY5N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRnUVwXnSXS0qhG/dKL7+fvtMu/vthsXgj5QcoxVjQrutQqtr5juMrw
hQJ3u2PoIq79iQlWApxGJaWk7MBvII1VWFF9gLGjulTbi5cFwdcbhsY7q7qNcneF
61Gcb8hrdwTNcUGb/sYZ7a/am1YYimgMt/U9hTHPL5x5L9q/8gicCL2lzhjWBj4y
cfmcOMmpfE5khO0zRgWjuwlwQac3/K0dl6DfAYDOW1z4SIsTJuxV4NZGjcwN53pP
RKDPJW40Ln38IF8O0sNeOV9M7sOo1Nh6eSny1dml9E55IbTCqDeeCN7Nfo987ix+
coPRbivtZsYB6SNdoYjR+WdzFeb7GsI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:39 2025 by rpki-client