Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091955d4-0024-340b-8e02-3a2616e8e637.roa
File:                     091955d4-0024-340b-8e02-3a2616e8e637.roa (raw, json)
Hash identifier:          OG0vKBM9leQPuaqQhAZJj8HeCEr5aX8DR2VYUcJeu+I=
Subject key identifier:   8F:64:50:5B:6E:22:EA:17:ED:C5:16:1C:E0:81:FC:CD:20:AD:BB:FE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2BAE830FC05D065C1BB90
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091955d4-0024-340b-8e02-3a2616e8e637.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        170.199.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ba:e8:30:fc:05:d0:65:c1:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=01358cae-b046-4e89-8b04-bec192e10493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:67:6f:77:d2:c8:2e:62:05:e9:03:5d:90:
                    e4:6c:6b:a6:1f:0b:97:94:a5:25:b5:4b:92:a8:3f:
                    22:60:a9:1e:f4:cf:fe:9a:37:0f:b7:cf:52:3c:74:
                    1c:b5:48:cf:81:80:fa:ff:86:b4:e4:a2:13:ab:0e:
                    5f:6c:19:0a:69:f3:af:19:d4:0f:a4:4e:7e:69:c1:
                    95:0d:c2:4b:96:ec:0c:50:b9:0c:a9:26:dc:0b:9f:
                    fd:24:c9:3b:75:52:fe:d1:d8:c5:44:93:d7:21:49:
                    e7:94:58:f3:39:53:db:b6:6b:8b:f9:52:d1:4f:7d:
                    8b:63:d3:8c:43:48:d5:b8:29:49:d2:d0:94:d4:65:
                    f9:24:27:25:4b:c5:5a:37:f3:04:69:24:85:26:32:
                    50:be:a9:ea:33:6b:9d:32:5d:e5:f8:40:4a:98:4e:
                    07:f9:fd:5b:f6:15:15:b1:fd:76:f8:1a:d3:56:30:
                    b1:91:92:eb:fd:fa:a6:81:13:73:21:88:5c:e2:68:
                    8e:49:72:f7:37:d9:2c:4b:89:63:77:76:e5:13:fe:
                    48:83:13:85:b9:f4:ca:00:b3:4c:4e:84:5f:da:38:
                    7e:bd:f7:8a:0c:80:da:c1:b6:4b:15:96:1e:ee:03:
                    e2:69:88:ab:cd:0d:25:10:e0:a1:01:34:d1:88:88:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:50:5B:6E:22:EA:17:ED:C5:16:1C:E0:81:FC:CD:20:AD:BB:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/091955d4-0024-340b-8e02-3a2616e8e637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:37:22:d9:60:00:5b:6e:ec:64:24:7b:9c:a9:b8:c8:5c:
         21:af:07:57:49:dc:21:21:5d:e5:8a:f3:95:be:b2:cc:6b:3a:
         7e:bb:d4:9c:b9:f4:ed:c6:9a:5c:0c:5f:a8:95:de:c6:64:26:
         48:a6:b2:f9:ad:94:99:ae:ce:af:9e:9b:5a:24:63:ae:00:1c:
         02:67:7b:18:31:f9:7b:01:77:79:f6:67:0f:19:5b:9e:1f:de:
         78:cf:53:a3:2a:0a:8d:75:20:69:d0:c8:a8:5d:67:3e:15:2e:
         3a:8c:05:0a:a4:1b:f5:5f:79:71:50:db:3a:3e:fa:a0:98:29:
         c6:d6:d0:8b:c7:10:df:fe:4e:17:05:3c:96:c3:cf:a7:44:67:
         b6:43:92:66:3e:61:59:63:c3:b0:3c:b6:b8:c0:92:d2:5f:3b:
         85:50:58:6e:24:33:50:31:00:91:70:00:cf:71:3d:05:f9:e5:
         29:da:c4:61:e9:8c:24:10:70:44:3f:ac:6a:28:c1:99:1c:dc:
         4c:1b:7f:01:3b:fc:b1:6b:dc:c6:af:13:74:9b:5f:df:7a:18:
         b0:6f:15:a8:78:4a:4f:29:86:3f:c6:d6:e3:fe:74:38:cb:63:
         5a:50:35:64:02:84:f4:20:7f:fb:41:cf:20:bd:2b:de:17:82:
         a7:36:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:28:26 2026 by rpki-client