Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa
File:                     283d8e7d-312d-35e8-b071-142aa9569e24.roa (raw, json)
Hash identifier:          18QBCxTDIoACrKAajXdVmoIatqutA4pyTrcH/w1azpU=
Subject key identifier:   14:B7:EB:8E:1E:29:2F:5F:3C:77:C0:05:45:26:81:5B:82:6E:D4:76
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584BBA105C16A18C01FAD11B7320
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     64267
IP address blocks:        209.59.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:5c:16:a1:8c:01:fa:d1:1b:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=bb4bc877-170e-4e33-aa0b-a8b25e81bc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:0e:c5:77:90:42:e5:3c:7c:2f:98:ab:b4:
                    4a:b1:6a:3e:ff:62:c6:8c:d7:f6:bd:21:e7:2c:b3:
                    9b:d2:a2:a6:0a:81:07:f1:52:d9:19:23:02:31:cd:
                    8a:2d:a0:ea:8a:31:77:6c:71:a6:35:e0:f3:3d:0a:
                    d8:00:b9:18:69:88:3b:f4:ab:f5:05:9b:e4:2c:6d:
                    36:ca:8e:ea:4a:3a:7d:4d:85:95:9a:16:72:35:34:
                    b9:26:32:4a:8e:a4:5b:d7:19:13:7f:8a:3a:f9:35:
                    4c:44:34:4f:7e:b9:3a:6b:9a:29:33:71:49:3d:03:
                    d8:f3:ac:09:8a:a9:4c:58:e1:61:8d:26:1a:b3:a3:
                    b7:c5:e2:2d:64:d1:b3:e1:b7:9c:bb:3a:57:6e:3e:
                    4d:5b:b3:a5:3e:7c:7e:1a:f3:d5:56:fd:28:9b:0d:
                    20:37:86:4a:51:b2:cc:e5:a4:f4:40:f8:e4:ed:8c:
                    72:05:67:f8:97:e3:e4:02:8e:79:de:79:c5:a8:a6:
                    01:15:54:14:1d:3a:65:68:23:a8:a8:33:28:a2:19:
                    53:32:ea:5b:87:2f:4a:54:3b:5b:6f:64:d1:d6:b2:
                    62:3f:05:a0:0d:01:c6:ae:55:cc:bb:82:95:f6:3c:
                    65:56:56:70:4b:71:0b:69:e5:1c:34:22:0e:57:22:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:EB:8E:1E:29:2F:5F:3C:77:C0:05:45:26:81:5B:82:6E:D4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/283d8e7d-312d-35e8-b071-142aa9569e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cc:ac:f4:6d:57:95:5d:61:b2:40:bd:53:a4:be:d4:3f:22:
         d8:45:43:78:48:65:30:08:7f:43:92:f1:d3:40:ed:7c:48:82:
         6b:19:07:74:a9:76:a3:2f:1b:c1:26:ab:a5:4d:b4:11:09:dc:
         07:93:23:43:1f:cb:5d:e4:89:b5:cb:e2:89:c2:ec:0d:66:c8:
         d8:cf:84:be:85:4d:76:3a:34:f2:81:26:6e:78:36:77:f5:ab:
         35:b3:7e:f5:ee:65:53:52:2d:8a:d1:1a:f9:6e:d8:7c:5d:f0:
         f9:37:b4:30:71:66:9f:71:d4:8d:a7:92:b4:d3:8f:8c:3c:46:
         ae:68:94:73:46:7a:0b:13:78:f5:92:c4:5c:d8:1f:c1:ac:36:
         fd:6a:8e:21:50:0e:3c:e9:e6:89:d9:19:c7:d9:3c:fb:8a:ae:
         65:80:cf:a8:2a:c3:ee:28:21:09:2b:c1:b8:d0:a4:eb:b9:a9:
         61:09:fb:2e:93:b8:f0:6f:a3:97:38:c0:17:4c:1d:a6:52:bc:
         11:38:9d:12:78:2a:0d:6c:db:c7:cf:b5:17:b2:6b:8a:c1:49:
         20:99:a0:6c:e9:3c:56:ef:e4:7d:2d:35:60:e0:1f:5b:b0:64:
         e3:65:f8:20:19:f8:69:c1:55:47:e7:01:d9:6b:c0:a7:db:fe:
         88:c4:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:19 2025 by rpki-client