Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa
File:                     101b421f-56d0-36b5-8bc2-cd9983162b0a.roa (raw, json)
Hash identifier:          pJil8okKjooPHBRKoPEKTWgTGchyjELsN7TT9FPNRHw=
Subject key identifier:   42:BC:4C:21:F0:75:80:33:79:48:31:58:B3:78:8D:77:09:72:58:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE310439A2F9555DCA84C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        192.158.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:31:04:39:a2:f9:55:5d:ca:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3fc0d49e-652c-46f3-a486-cee21fcf28fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:b8:30:5d:8f:2f:9e:18:41:35:72:c6:20:
                    7f:57:9d:a8:d0:12:b8:98:b5:30:49:89:b4:9d:0b:
                    b0:27:96:dc:5e:58:5c:d6:26:7b:9e:38:24:41:22:
                    c0:51:81:d5:0b:e2:85:d6:a0:5b:4c:7d:6f:55:0d:
                    57:90:81:d7:ed:30:a4:cc:0b:c8:ce:0a:15:15:c9:
                    02:a3:51:8a:1f:04:52:ae:eb:cf:0b:a5:72:3e:57:
                    76:aa:30:26:b2:0e:de:23:15:46:26:ba:fa:8e:19:
                    30:f5:f5:0f:ed:b9:04:33:94:3d:70:68:21:31:ce:
                    80:b8:71:7f:96:dc:2c:bb:63:dd:bd:d8:dd:55:19:
                    40:03:17:3d:e4:08:00:e4:21:78:5a:68:21:fb:ed:
                    91:ac:37:d3:bc:b2:1a:d9:02:e4:80:ea:43:90:cc:
                    2a:ed:52:65:60:81:06:23:17:38:cf:eb:65:22:57:
                    6c:f1:35:62:f7:45:1d:d5:37:9d:22:9d:f6:53:62:
                    5f:8e:73:85:40:12:ca:52:a9:a8:58:ac:7c:15:00:
                    9c:07:92:c2:fd:87:2f:63:e6:19:26:b7:dc:43:db:
                    1d:b0:84:30:bf:1e:f2:ba:f8:c3:12:56:68:7b:82:
                    ae:13:f3:33:7f:ba:05:e4:21:d8:39:40:27:a3:d3:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:4C:21:F0:75:80:33:79:48:31:58:B3:78:8D:77:09:72:58:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/101b421f-56d0-36b5-8bc2-cd9983162b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:3b:c4:23:a4:f9:fe:4b:7e:5a:33:98:09:b5:a2:fd:e7:
         91:68:de:37:3a:3e:8c:1f:de:ad:6e:e8:2e:8a:ae:90:2e:16:
         76:dd:46:bb:c7:5a:7a:71:15:69:27:99:3d:a6:cc:44:b0:ea:
         de:30:52:55:fe:8f:da:67:73:3b:8e:59:fe:97:ba:17:be:39:
         15:96:d9:30:86:2d:04:01:bd:72:02:e3:08:2b:d4:4b:88:2c:
         f0:d1:14:e1:69:f2:a3:06:24:01:62:6e:a1:79:61:54:aa:bb:
         b7:d1:75:bb:74:1a:1a:d2:81:36:26:3a:3a:e3:f1:07:00:75:
         6b:09:0b:ca:c5:42:4f:08:8b:bd:fa:14:6b:93:04:ec:5f:5c:
         41:2d:fe:5c:5a:76:ae:8f:b8:25:50:a5:5c:e0:36:88:8c:30:
         c1:b1:80:77:51:4a:24:96:49:58:db:e6:b2:6d:45:f7:42:3c:
         ae:9d:72:ff:20:a8:4e:ea:1d:70:2e:51:53:d8:21:85:09:ca:
         89:e4:79:7f:d7:d8:ff:db:84:4f:46:8c:4b:b8:17:87:7d:68:
         03:3f:b9:2e:f9:5c:77:b7:b9:51:91:69:dd:ad:eb:b9:f1:99:
         50:e8:5b:68:e3:90:90:55:e4:6b:ab:57:25:12:9d:c9:78:fd:
         cb:be:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:48 2025 by rpki-client