Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
File:                     02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa (raw, json)
Hash identifier:          pvAk6FBrRmMcqyYuR3R+DjUFwVDGZcMtXPzrTIXBlN0=
Subject key identifier:   D7:35:65:F5:79:76:3F:42:7A:A1:02:70:0C:2E:99:8E:93:6F:A6:3C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900BE3C977E0D91B9972700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        168.91.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:be:3c:97:7e:0d:91:b9:97:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=5184370f-18a4-46b1-9eab-d9e49d2d2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:b2:75:1d:20:61:6b:33:f2:2d:b9:b9:37:
                    c1:24:bf:05:db:42:02:dd:64:64:09:4f:e9:82:4d:
                    99:a8:41:6a:1f:04:ae:7f:7f:39:c8:92:5e:95:27:
                    bb:c9:2b:f2:a1:5d:24:7f:1f:7b:24:d9:07:57:a2:
                    3d:b4:c4:52:6d:b9:25:3c:6e:d4:a0:53:1e:16:4c:
                    a8:19:78:d9:92:39:67:e7:20:5b:84:07:5a:22:8a:
                    5e:96:01:69:8b:d9:53:14:5a:d9:90:c8:be:1c:6b:
                    15:8d:7f:28:50:0b:a4:99:15:d4:2f:2a:31:6b:87:
                    b6:fc:c4:38:29:1d:07:86:c7:eb:99:0e:54:c0:ef:
                    62:47:52:72:a9:bf:a2:94:f6:04:2e:11:ce:94:e6:
                    28:53:c6:da:12:45:14:cd:c6:b1:7a:af:80:8b:a2:
                    1a:c0:c3:68:ca:e5:60:5f:33:4a:a5:86:a8:e5:10:
                    1f:d3:cb:12:f2:4e:fb:72:66:51:0e:c3:4f:da:0a:
                    d3:fe:55:f8:f6:bb:7b:a1:96:50:ed:12:15:34:04:
                    0f:08:bd:36:62:fe:89:b4:5a:6f:5f:98:94:d8:fa:
                    a3:4b:cf:40:80:69:b5:93:dc:3e:9c:39:01:4f:47:
                    b4:00:06:74:a4:45:0a:08:b4:58:01:6c:6d:ec:23:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:65:F5:79:76:3F:42:7A:A1:02:70:0C:2E:99:8E:93:6F:A6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:33:42:73:cd:12:be:14:3d:3a:1d:ac:b0:a2:04:53:57:ed:
         f9:63:bc:09:1e:4f:3c:e7:d3:88:2d:51:cf:32:97:20:c0:bf:
         9d:11:97:e3:11:f9:09:97:c5:26:69:09:e6:2e:d6:a0:a3:66:
         9a:ce:0c:3d:cd:f2:5a:90:a4:75:bd:72:d2:7e:4e:b1:bc:5b:
         1f:d1:60:07:54:93:23:ff:2e:63:2d:5e:91:b1:7a:64:7d:40:
         d9:46:e3:1c:e3:79:ea:c2:a5:4e:fe:74:df:e2:20:c9:7a:50:
         4d:e6:0d:09:eb:12:3f:0d:6a:87:0a:3b:a3:5e:82:23:78:c7:
         e1:e8:e0:96:e2:d8:08:56:5a:90:f0:f2:80:18:26:75:aa:a4:
         6e:79:f2:59:9e:09:f9:d2:ed:c2:75:76:14:91:0e:a1:43:31:
         22:54:5f:de:b5:7e:a0:89:91:05:70:81:bb:9f:27:88:84:52:
         c8:2c:a2:a7:40:68:70:56:3a:d4:c7:32:df:b8:2f:3c:3d:23:
         a6:7b:08:61:6e:06:16:50:00:6b:ce:9a:f8:76:c3:61:bb:fe:
         0e:4d:d3:b1:81:e3:4d:c6:0c:fb:95:f0:b6:37:33:df:71:65:
         a5:a7:47:5e:ca:67:f6:82:27:8e:64:bc:49:8e:75:f0:35:8a:
         0b:14:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:57 2025 by rpki-client