Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa
File:                     28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa (raw, json)
Hash identifier:          mCqAUEK5HSNvSPvb9gind8Nz6yaDEGxfTkadsek50sI=
Subject key identifier:   82:F6:F7:2C:8F:4B:E6:26:AF:42:C6:E1:6A:4C:13:7D:C6:AB:CF:E6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B583C82AE42D78451ABA42080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        208.181.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:82:ae:42:d7:84:51:ab:a4:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=3ec9cbe6-5dd1-45ec-89b9-f4451c5c7379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:78:fa:cf:be:9c:16:06:4d:8f:73:8a:b5:
                    1d:54:43:50:c5:e3:bf:35:65:89:ed:71:59:55:99:
                    15:78:c6:a8:8b:e8:9f:74:a5:0a:f9:fa:d5:58:10:
                    86:b9:96:87:34:c1:e4:05:23:32:8a:f3:b3:4f:1c:
                    8a:6d:48:5f:2f:25:d3:c9:f1:b3:15:40:e8:31:9a:
                    5c:f1:e1:84:6d:6f:af:7c:cc:57:56:51:a1:c2:63:
                    ca:21:bf:cf:7c:2e:ef:25:d0:c3:ee:13:61:cb:6a:
                    8d:47:13:6c:a4:93:a6:c8:7f:1f:19:0c:92:05:ee:
                    ff:17:4a:35:5b:8f:55:04:49:73:ab:54:9b:de:5d:
                    d4:5b:44:5f:b5:27:5e:07:43:d6:98:de:e0:d8:b5:
                    a9:4e:dc:64:a5:1f:eb:f6:03:f1:fb:99:b2:c0:99:
                    76:9d:a5:2a:ba:af:8a:e5:b8:8f:61:b2:67:9a:84:
                    56:1a:72:19:3e:14:66:39:21:76:d3:5d:37:f3:e3:
                    0d:eb:a4:85:70:3e:f1:c7:49:2f:81:8f:40:7e:9d:
                    41:73:47:fa:15:96:b8:f3:f1:7d:3e:49:95:42:11:
                    af:01:cf:65:40:30:be:65:d8:67:c4:e3:9c:55:28:
                    18:f3:77:a8:58:9d:2a:e3:ef:13:86:30:cb:b6:cb:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:F7:2C:8F:4B:E6:26:AF:42:C6:E1:6A:4C:13:7D:C6:AB:CF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28ddbc74-9fb4-3d0b-9446-8d25ec3576ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:da:a8:10:b1:99:6d:1e:fe:60:02:9b:db:62:d6:a9:e2:
         ee:95:e1:06:c3:c8:2f:96:b4:71:9a:96:46:42:c7:47:5b:61:
         92:f4:1d:84:66:80:3c:a3:5f:fc:d6:1c:88:55:ae:a4:b7:30:
         f0:5b:e8:c1:79:38:12:40:84:15:ff:de:b3:de:e6:e8:c0:72:
         9e:e1:74:ca:67:76:e3:7d:1e:5f:56:1d:23:c9:2f:d1:4b:69:
         f2:68:97:30:16:b5:79:b3:d0:df:87:2a:75:ae:03:f5:ac:a8:
         17:84:9d:9e:f2:cc:8c:f5:10:2a:7b:91:c0:0f:1b:23:cf:71:
         f7:fc:8f:50:c9:87:09:43:01:e3:62:88:6e:e7:ea:f4:8e:c3:
         c4:92:f6:82:61:a8:1d:8e:54:1c:10:f0:1e:e3:ae:05:e0:01:
         ad:f1:2c:5d:19:26:88:b9:4c:24:cb:f4:8b:87:ed:58:f6:a2:
         19:89:eb:00:51:ac:5d:72:6f:23:de:c7:54:93:c9:ff:05:06:
         ee:55:9c:d6:b9:35:3e:63:61:93:69:5d:d1:20:51:57:4e:8c:
         13:16:26:d8:6b:55:11:2f:0c:32:01:0e:93:36:89:8a:f8:79:
         cb:24:e8:82:c7:ae:57:33:57:20:f9:a2:c4:77:f1:d0:35:6e:
         88:ab:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:32 2025 by rpki-client