Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff088ebc-7795-3f1c-968f-a236c3c438b6.roa
File:                     ff088ebc-7795-3f1c-968f-a236c3c438b6.roa (raw, json)
Hash identifier:          ASXimI/Ddpa6k7wm6Q1MQHyNafQNI1HSlfEkyXNCIeM=
Subject key identifier:   28:E8:AA:24:3C:37:DC:F1:5D:54:8B:1C:23:9B:B2:D4:54:5C:9A:33
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C6056B46E3077D426E500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff088ebc-7795-3f1c-968f-a236c3c438b6.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        69.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:60:56:b4:6e:30:77:d4:26:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=5368b6eb-0703-41e2-b1b5-8f040ee90fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:9b:48:24:c4:83:45:73:3c:8b:d3:52:18:f0:
                    8f:01:00:b0:a5:28:9f:60:87:1c:3e:87:cb:14:20:
                    4f:37:5b:08:37:9f:7d:23:ae:33:f9:f3:bf:91:e6:
                    7d:3e:71:33:c5:ba:14:89:00:17:51:2f:22:a1:d8:
                    53:57:10:51:bb:42:f3:6f:a9:cf:3b:91:67:82:4a:
                    a1:47:87:56:19:44:c3:67:03:81:d2:6a:20:db:32:
                    76:69:19:6f:2e:4b:37:86:4d:74:b5:30:c7:9a:6b:
                    4c:22:7a:ef:84:d4:e7:e2:aa:12:8d:4a:79:fc:4d:
                    ca:d7:bb:0a:e7:fc:f0:44:0b:d0:e3:46:12:17:a0:
                    e3:3f:c1:5c:de:1a:86:74:2a:9c:96:60:f8:d7:8b:
                    e0:9e:5f:96:4e:a7:e6:20:98:e2:1c:a5:67:7b:39:
                    49:b7:78:e6:dc:56:0e:cf:7d:af:7e:64:27:85:a5:
                    20:32:dd:70:cc:6c:c3:d9:a2:2d:7f:c6:d3:fd:0e:
                    27:01:6a:bb:66:21:da:eb:c1:96:75:a2:10:02:6f:
                    fb:80:72:9d:42:b1:4d:89:81:7a:4f:24:32:75:c6:
                    20:43:2d:87:25:2f:b7:8a:33:e4:fb:d0:4f:66:d4:
                    3b:3f:74:36:27:3e:a2:9e:59:13:49:7f:68:4c:d9:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:AA:24:3C:37:DC:F1:5D:54:8B:1C:23:9B:B2:D4:54:5C:9A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff088ebc-7795-3f1c-968f-a236c3c438b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:79:62:8c:63:20:2a:47:7c:c4:46:93:79:58:0c:fa:07:
         dc:16:29:23:6d:e2:22:3a:26:31:3c:16:fc:8b:d0:f2:41:86:
         1b:9a:69:2a:9b:7e:73:84:41:33:55:92:c2:5c:a7:83:07:6d:
         2d:80:5a:c6:db:dc:c8:8e:42:da:60:3a:95:9f:29:05:45:79:
         47:89:85:7b:80:31:46:a1:f5:42:28:4f:ed:27:93:d6:ca:03:
         1f:e4:67:1b:e4:89:66:cc:15:f3:f3:51:d5:61:7c:71:7b:a2:
         71:a0:bc:6c:42:5f:ca:1d:39:75:55:26:74:e0:0a:1d:0f:45:
         f1:d9:61:b9:11:a7:da:20:9f:05:cb:b8:cc:c1:ff:8e:20:45:
         9e:ed:82:fd:ef:5d:fb:28:b9:e0:2f:94:75:d5:58:09:02:03:
         75:4f:38:b4:66:06:9d:61:7d:ce:4c:34:13:66:2c:ac:93:11:
         1f:6e:91:f0:b1:37:27:f4:d8:0c:29:17:5a:48:54:2b:58:c7:
         40:ad:89:bd:5e:cd:35:29:73:27:04:f8:62:9d:34:c4:ad:c9:
         dd:26:85:8f:b2:13:52:57:01:63:d5:a8:33:5b:af:d2:2e:55:
         51:4e:e9:51:9f:67:73:19:6f:fe:27:45:5e:b8:ba:81:e6:63:
         06:09:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:38 2025 by rpki-client