Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa
File:                     ef737142-8d1e-3137-819b-6c56bdc462c4.roa (raw, json)
Hash identifier:          EkbKPEzeaNCNTigoBqT08Pg/uJ76P+oYB1pMzbahp2U=
Subject key identifier:   4B:3A:E9:ED:01:71:F9:0E:75:4A:45:97:F2:2A:98:A3:BE:4B:E8:6F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C5E9804DD372D34538500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        209.163.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5e:98:04:dd:37:2d:34:53:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1fd3b9a8-abae-49db-ad23-da047040bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:88:36:cb:d9:63:dd:37:31:50:d2:57:66:
                    b1:a6:3d:e8:96:22:63:91:72:9b:31:cb:34:c7:8c:
                    11:26:34:12:a9:fc:fc:6f:bd:f8:90:6d:3c:7a:f3:
                    0f:87:b0:93:0e:bf:58:d3:4a:a4:ed:37:d4:95:04:
                    d3:87:0c:60:d8:df:f4:28:5b:e1:56:b4:d4:da:60:
                    70:a7:39:24:8e:1e:00:b6:5a:0c:aa:f7:d0:f1:c7:
                    07:07:0e:dc:5c:4b:d1:7c:b6:31:88:50:ec:81:4a:
                    c3:81:d1:7f:4e:a7:17:d4:3e:b4:8e:1f:a2:be:2b:
                    f3:ae:d4:d2:55:22:cc:e7:e9:ef:80:b4:d5:32:57:
                    87:f0:11:65:ff:d5:85:f5:ce:d2:11:3b:8a:2b:ab:
                    28:b5:cc:fc:82:46:15:cf:56:6c:f2:b3:c2:13:38:
                    5c:08:a7:86:85:8b:8a:8f:fe:c3:14:45:a0:99:1c:
                    6b:ff:dc:9e:df:2d:57:41:4b:06:30:d3:87:0c:08:
                    41:fc:d8:f4:eb:2a:13:88:7a:51:8f:86:5e:a0:5a:
                    14:01:28:92:79:e9:83:9d:b1:3e:cd:b7:8c:80:22:
                    bd:8e:90:08:71:0a:66:3b:36:f9:4f:21:5b:03:6b:
                    a6:9d:cc:58:69:11:6b:9f:26:a0:cb:a3:0d:fc:f9:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:E9:ED:01:71:F9:0E:75:4A:45:97:F2:2A:98:A3:BE:4B:E8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:b8:97:bd:7d:23:5c:6b:a4:76:ca:68:b6:5e:a2:13:09:37:
         a5:b2:1c:27:21:4d:c2:4f:c4:cb:1e:52:9f:49:33:61:6f:02:
         ee:67:69:3a:11:e6:d0:ff:96:51:cd:48:98:9e:01:a6:96:b0:
         e8:5f:42:e4:bc:81:bd:d4:ac:de:6e:81:8d:e7:9c:23:27:b6:
         fb:20:46:de:a6:00:07:ce:4e:bc:6a:a3:27:18:1d:8d:9b:89:
         3e:54:85:07:16:4d:1a:51:22:74:aa:d7:13:e6:91:36:59:59:
         35:15:53:c9:50:a4:db:33:61:05:a5:aa:34:30:c7:63:7f:48:
         e0:02:19:62:2c:2d:66:f6:52:67:2d:d0:3d:1a:8b:20:7e:df:
         91:b5:39:ce:88:bd:44:b7:27:07:22:82:54:c4:1c:98:de:95:
         2c:35:a0:db:24:a5:d3:10:e4:53:30:e0:e1:89:e8:f1:61:03:
         5a:fb:63:37:8e:b7:40:22:d7:1e:12:09:a0:e2:c1:1f:b6:52:
         0e:2a:5b:c3:27:1b:ad:9e:94:e6:a7:a5:0f:79:cf:bb:d3:9c:
         a4:7f:e5:eb:90:de:b7:7f:18:65:95:26:bf:d7:c3:40:66:87:
         45:85:b3:9c:f2:01:26:41:b4:01:6e:fc:71:82:23:9f:6d:d8:
         85:79:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:17 2025 by rpki-client