Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea6f7af8-abd5-3906-a946-cc9c5beb824a.roa
File:                     ea6f7af8-abd5-3906-a946-cc9c5beb824a.roa (raw, json)
Hash identifier:          3kE5u+qkmzSk1VzaCvP2fp+A7vTZUHQ1eUG7GkHhbow=
Subject key identifier:   CB:16:61:3C:A4:0F:CE:30:72:71:72:C7:31:19:CD:4B:F2:78:03:16
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B196C0FFE8AB65F34A220F2E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea6f7af8-abd5-3906-a946-cc9c5beb824a.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     7029
IP address blocks:        69.58.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:0f:fe:8a:b6:5f:34:a2:20:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=e8caad6c-3497-4869-a13c-7b98939bdc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:7d:3f:e9:1a:9d:4e:33:fc:71:c1:7d:63:
                    ae:c0:32:4c:37:87:04:3a:02:d3:58:8b:6b:5e:aa:
                    f9:d6:eb:3c:55:4b:55:d6:b7:48:96:bf:af:b5:4e:
                    af:8d:2c:44:d3:51:e9:4c:b5:97:ed:8d:fe:82:0e:
                    0a:31:1a:3e:e5:6e:d7:0d:88:ea:aa:d0:00:f0:34:
                    e8:91:9d:d1:5e:86:f4:7e:13:49:4f:da:5a:96:0f:
                    89:fb:5a:51:f9:67:e9:3d:aa:68:6d:78:29:c2:29:
                    f9:d1:2c:5b:5a:48:c7:7f:9e:d6:11:97:44:98:12:
                    16:8e:b2:7b:1a:2c:fe:c9:e0:6e:74:c4:c6:f9:2b:
                    41:01:8d:53:17:3c:eb:38:e9:19:50:8d:5b:9e:b3:
                    5a:65:3f:c2:f8:6b:a8:1e:cc:45:11:4e:3e:91:b6:
                    33:ca:b9:9f:c7:65:ee:21:04:90:b0:ff:bd:2d:01:
                    b0:6e:85:b4:68:42:37:b3:1d:54:1f:ff:d7:f7:cd:
                    bc:48:e0:63:13:a7:30:71:97:e4:39:9a:0f:fd:b2:
                    5e:e2:ee:59:a3:c6:d6:ac:c5:93:7d:f0:ae:8e:f6:
                    15:8a:79:98:fb:19:2e:47:91:c2:4f:e8:fb:05:80:
                    22:8a:6b:e1:ca:2b:5c:18:f5:79:c7:a3:52:fb:f3:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:16:61:3C:A4:0F:CE:30:72:71:72:C7:31:19:CD:4B:F2:78:03:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea6f7af8-abd5-3906-a946-cc9c5beb824a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:95:b8:47:24:34:ab:b1:a8:11:d6:dc:5a:37:ad:1a:9b:
         45:24:6d:8e:48:c6:95:63:af:b6:00:73:7b:98:9c:c0:46:1e:
         43:33:c8:08:a2:99:30:d1:c1:77:a4:95:75:17:c4:c0:19:fb:
         50:47:38:2a:1a:16:6e:ad:a3:75:6b:77:54:cf:4b:9a:8a:da:
         cc:0f:61:72:3c:50:af:9a:ae:00:89:4a:e3:f7:cf:b6:f5:ae:
         c1:21:75:91:d2:c7:cd:e5:6f:82:32:8f:19:e0:8d:34:66:42:
         83:7c:c1:04:3c:1d:73:46:65:2c:d8:81:7d:d4:ce:01:e5:20:
         7c:be:31:4c:77:2b:20:cf:41:8f:4a:e3:a9:72:27:59:ed:06:
         bd:90:f6:7e:eb:4b:97:5d:fc:1e:17:94:9d:d4:99:83:28:26:
         68:31:ac:76:31:59:bf:07:19:93:68:fd:4b:dc:73:67:d2:b8:
         2d:d5:e8:c2:45:6c:dd:81:26:f9:63:d5:7e:4c:1a:e3:13:de:
         a2:c2:d1:44:e3:ee:5e:1a:56:26:87:8e:f1:db:35:6c:b7:e5:
         db:94:a4:f6:53:98:5b:14:96:1b:ca:6b:43:b0:33:3e:c5:14:
         81:68:d0:a5:a0:18:a9:a9:0b:eb:a3:20:6b:18:78:74:d3:b6:
         10:2c:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:54 2025 by rpki-client