Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa
File:                     ebb2b8c2-8299-3028-905e-2385d42b1101.roa (raw, json)
Hash identifier:          9Vrhp6ww7DFAnj2aDcw4sbslgWng/1XJ0LpdLECNCnM=
Subject key identifier:   8F:F1:04:D9:EB:A1:8C:5A:F9:26:5A:29:73:E8:B7:9E:65:61:74:38
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38B1FF2B28EA63F03AD08F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa
Signing time:             Tue 17 Jun 2025 13:04:40 +0000
ROA not before:           Tue 17 Jun 2025 13:04:40 +0000
ROA not after:            Mon 15 Sep 2025 13:04:40 +0000
asID:                     7029
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:b1:ff:2b:28:ea:63:f0:3a:d0:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:04:40 2025 GMT
            Not After : Sep 15 13:04:40 2025 GMT
        Subject: CN=5e23b3be-2969-4834-b0ad-6ed32ecea579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:55:0d:39:1c:06:6e:ed:56:2a:09:c8:04:
                    97:8d:c2:15:fb:59:e3:28:e3:58:62:c6:8d:68:81:
                    89:e6:d8:a2:d0:04:e9:b8:2d:90:06:27:38:e6:b3:
                    07:8c:91:97:92:2a:27:c3:7b:4c:4a:cc:b9:89:dc:
                    28:9c:a3:75:80:78:31:8d:7b:b1:a2:8c:6e:05:12:
                    15:90:41:85:41:8b:d9:d1:bc:8c:61:3a:c0:ab:7b:
                    aa:f3:6a:5a:ec:a5:69:58:db:52:92:7e:4e:2b:5a:
                    c9:12:b7:53:3b:4a:e0:d0:e2:ee:46:66:bd:f3:2a:
                    61:8d:37:5f:ab:53:ca:28:d4:78:27:40:d7:91:5f:
                    3b:34:0e:8d:48:b4:14:0a:50:7a:ae:a8:d2:9f:59:
                    29:51:8d:7a:7d:70:31:4b:30:ca:9a:25:56:73:a7:
                    81:98:50:3e:04:68:95:a3:9a:92:31:bd:9f:22:55:
                    e8:d7:67:53:89:61:8d:c2:25:59:06:3a:e4:05:37:
                    63:d2:7e:0c:ea:30:dd:dd:12:6b:b0:01:e8:e7:a7:
                    e6:45:34:75:a9:95:0a:6e:b7:f7:2a:93:d0:54:a7:
                    72:a8:02:96:b6:b4:10:a8:79:96:d0:ca:eb:c9:d7:
                    0c:29:d5:fd:eb:3b:f3:ba:e1:94:ce:ab:e4:ae:bb:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F1:04:D9:EB:A1:8C:5A:F9:26:5A:29:73:E8:B7:9E:65:61:74:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebb2b8c2-8299-3028-905e-2385d42b1101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:d5:0e:42:87:df:24:f9:dc:69:b3:e9:7e:66:35:4a:1e:
         d8:a8:9f:7a:82:62:10:10:8b:f1:d1:6d:61:5e:91:a2:ff:ae:
         15:ea:05:87:f9:6e:bc:9d:64:45:b1:a5:58:3f:dd:d4:d0:27:
         03:78:a8:21:c1:99:c1:ca:9f:82:86:8c:16:8d:43:9b:84:55:
         8d:ef:7b:b1:cc:3d:82:14:9d:5b:03:28:f5:1d:9b:a3:53:a7:
         7e:c2:bf:91:4e:bf:53:fe:62:5a:25:6a:44:d0:52:1c:d2:2a:
         2f:cd:91:8b:39:02:10:64:a2:8e:a7:e5:c8:e6:b8:d9:d6:b2:
         56:30:95:93:29:49:c4:95:53:42:bf:26:2e:04:9f:c9:7b:da:
         14:d3:6e:c7:02:9e:58:de:70:54:d2:6b:7e:7c:ef:77:79:40:
         24:95:67:37:31:23:d4:8c:1c:a9:63:d3:45:09:94:67:93:d1:
         1d:df:2f:43:38:75:b8:7f:42:c5:d6:40:18:74:3e:f7:d6:85:
         96:5e:1f:24:76:00:77:de:51:e1:62:49:a9:41:92:f1:6f:9d:
         40:fa:14:15:0e:31:28:91:fd:ea:7b:ee:8f:da:a5:88:71:7c:
         75:66:df:76:b6:4b:7b:93:97:9b:61:4e:e3:b4:7f:7a:29:77:
         da:c4:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:00 2025 by rpki-client