Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
File:                     c41a86d5-a591-3154-84bc-09af501607e7.roa (raw, json)
Hash identifier:          NPYlSQrKMR/q9/OP+CNUILlvkP8FaOT/U74IxUF0CVU=
Subject key identifier:   58:FA:FB:4C:D4:1C:15:38:4F:EC:73:BD:7C:3A:4F:2B:EE:09:A8:6F
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584AE1966E0DE3C773A9546D8AA0
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6461
IP address blocks:        172.110.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6e:0d:e3:c7:73:a9:54:6d:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5565a777-71a8-4451-83a5-38633c4b4992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:4b:ac:74:fc:17:de:45:ec:53:58:54:99:
                    09:73:82:e1:2a:db:89:78:3f:1a:66:27:de:20:99:
                    31:0e:15:07:8f:7f:db:66:14:bf:c2:5f:88:d5:36:
                    6a:35:e3:09:bb:af:c5:de:38:5a:ba:2a:62:f6:e5:
                    6e:cc:87:e8:03:39:67:a5:fb:40:8e:62:f4:08:18:
                    98:82:6c:93:a7:b0:8b:36:99:36:dd:db:18:96:82:
                    dc:48:83:b9:d7:f4:d2:03:36:39:39:6b:d8:3d:22:
                    82:bd:15:50:27:37:47:2a:ae:4b:1e:0d:64:de:3f:
                    a5:41:86:a3:5b:78:46:bd:6e:81:9e:c6:6a:f5:43:
                    cb:34:bc:43:70:1f:53:08:b7:bb:9e:46:1a:a7:cd:
                    7b:60:e1:b2:31:d3:c5:36:33:08:59:de:3e:94:5b:
                    f2:c9:18:a1:bb:8a:0c:11:9e:e6:5e:fc:20:42:34:
                    69:27:ed:20:61:fd:d4:11:b6:c1:b6:fa:87:fb:53:
                    7d:40:12:0c:fa:59:bc:0b:f4:b0:b2:0e:f2:7e:4d:
                    01:a1:d2:cc:20:6d:77:36:fb:93:cb:6e:3d:06:38:
                    22:06:3c:0f:e3:d3:b9:78:1b:4b:03:79:e8:64:63:
                    a5:50:3a:7d:5d:eb:dc:2e:7c:ed:7e:bc:7e:fe:e6:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:FB:4C:D4:1C:15:38:4F:EC:73:BD:7C:3A:4F:2B:EE:09:A8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:e6:52:ee:f4:10:08:7f:f7:30:1c:0d:c2:74:14:15:53:
         76:73:8d:af:ff:f1:e3:57:94:e5:fd:c7:6e:ee:ff:c2:f0:8b:
         7b:1c:bb:1c:5e:4e:42:50:e3:c8:bd:3d:3f:fd:17:71:bd:86:
         51:c6:90:4e:09:19:ae:5f:ba:79:bd:eb:a0:1f:a4:92:67:da:
         5f:75:3b:bf:87:72:23:d7:8e:7f:cc:4f:9f:14:33:06:dd:39:
         25:e6:21:91:03:3c:56:e3:15:8f:f0:01:d7:37:77:d8:41:8e:
         c7:41:b5:0f:ad:1b:18:b5:25:22:3d:d5:2d:10:38:47:f7:78:
         ec:e9:d9:fe:7c:d7:32:89:17:ed:ec:16:4b:72:60:4a:96:9b:
         a8:e6:07:5a:65:25:8b:ae:86:f8:e7:f6:7f:74:11:ee:48:f9:
         8a:05:0c:3d:7e:ea:42:71:aa:29:9b:15:7a:a4:d0:d7:03:04:
         8b:8c:67:1b:a5:c6:c5:3a:c3:0a:9a:f3:6e:f4:ab:d5:01:5a:
         2b:38:1a:8e:15:0d:51:59:e0:27:ba:e6:8a:96:10:34:45:d8:
         bf:d0:56:d8:8c:66:82:a4:a8:df:8e:d8:1e:76:2f:77:6f:d2:
         1d:4d:6e:bb:40:1e:05:15:98:ce:b0:a6:f0:18:16:58:f1:8a:
         5b:bd:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:01:49 2025 by rpki-client