Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa
File:                     f30ef273-670a-357c-befa-96b7cb779888.roa (raw, json)
Hash identifier:          aSu7Auuw6d+6mIvwqMn5GYnZ3bmAFSBOFyPw/lVp6Zk=
Subject key identifier:   33:AC:C1:71:9E:19:15:4B:8E:F4:6B:71:35:67:FF:72:5F:95:C0:12
Certificate issuer:       /CN=4df6cec2-94eb-4439-960f-00719026d770
Certificate serial:       010D0C9F4328584A6C55CCB97DB2E4375D97B700
Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        64.28.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cc:b9:7d:b2:e4:37:5d:97:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=685cd486-841f-4981-84eb-e874b7672f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:62:2c:59:09:72:5b:c6:8f:28:bf:9c:d0:
                    8e:2f:2c:18:e3:d9:e8:71:61:69:96:30:05:ea:c7:
                    7f:6e:bd:0a:2f:51:06:19:1d:cc:9d:a4:7d:97:61:
                    db:aa:c1:1c:90:df:e6:13:44:b9:0c:93:73:18:4a:
                    64:11:6c:63:32:d4:57:0c:2e:a2:60:85:fb:51:49:
                    c1:8c:91:19:80:18:2f:0e:1a:d1:90:ed:c5:da:b4:
                    ce:f9:f6:b0:7f:e7:3a:d4:06:e7:a6:c1:0a:47:e3:
                    f3:2d:ad:5b:59:07:d6:65:81:42:df:bd:ec:c2:89:
                    ae:a1:ce:0d:80:25:f8:bd:ea:87:c5:7f:2e:33:a0:
                    5c:9f:b6:2e:15:5f:31:c6:b9:c7:fa:13:a1:08:16:
                    0c:c1:9a:5a:ca:96:ad:fe:ef:69:40:0e:01:f8:ab:
                    61:21:5d:3f:84:b6:90:76:f8:5f:d9:7d:71:ce:b4:
                    1f:11:f4:6d:d6:f2:8e:0e:82:fc:e0:87:06:62:3b:
                    7d:bb:fa:7e:10:4e:66:c8:b6:74:9e:d6:a1:89:a5:
                    61:3c:a9:b2:bb:31:70:c8:cf:cd:73:14:e3:be:93:
                    7e:c8:e1:6b:89:38:2f:2e:b0:7e:2f:b5:71:a7:81:
                    42:60:a0:ee:d6:d0:9f:52:2b:79:a7:7a:13:9a:6a:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AC:C1:71:9E:19:15:4B:8E:F4:6B:71:35:67:FF:72:5F:95:C0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:86:36:a8:01:79:de:81:30:17:f0:e0:f2:c7:c4:44:e9:63:
         07:74:f0:16:0c:47:bc:17:db:2d:38:d9:e0:2c:e0:69:75:7e:
         eb:3f:0d:cf:10:de:43:a2:e0:75:e2:ca:59:f0:e8:f5:e2:11:
         a5:3d:f1:c8:d4:13:82:7e:1b:3b:fa:6a:cd:e7:77:ca:ba:10:
         1f:95:1a:71:41:04:6a:9c:93:48:20:27:20:c1:5e:36:1b:8c:
         99:85:15:c0:da:9a:4c:41:69:21:a6:fb:54:60:2f:c6:79:9a:
         aa:01:35:16:2b:65:c2:cf:88:9b:c0:29:c6:fe:28:3e:62:40:
         4c:6c:58:0d:9f:5b:6c:be:d1:69:09:32:a6:4f:4e:89:25:01:
         2e:28:f9:e4:68:ac:88:68:fb:93:a6:05:c4:35:8a:94:dd:56:
         e8:da:23:47:70:40:91:d7:bd:d4:de:e0:4e:da:63:87:08:18:
         06:db:08:02:b9:1b:77:2a:92:34:3c:d0:47:05:6c:f2:6f:a4:
         49:07:62:51:55:7b:f0:78:b2:34:8f:fe:0b:14:d2:b8:54:6b:
         13:c6:48:bc:7f:e1:08:b4:71:21:0f:28:ec:c4:38:3e:81:c2:
         67:97:d9:8a:75:5e:91:1f:29:6e:ec:76:66:d2:1c:40:72:04:
         a1:07:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:40 2025 by rpki-client