Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa
File:                     328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa (raw, json)
Hash identifier:          6R5OlwNpvBgLf4L1yK5t48N+JBdd9jKqWIK9IpJHboI=
Subject key identifier:   A1:54:57:F4:6F:6E:32:BC:48:16:DA:1B:A6:7B:5D:DB:F1:E7:B9:AE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A963696B8AE660E075CCFBD40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     7018
IP address blocks:        158.62.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:96:b8:ae:66:0e:07:5c:cf:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=02ef6f1b-337a-4841-882d-4def1b09a189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:7a:be:be:34:cd:20:ed:75:13:75:22:7c:
                    a9:04:74:d7:70:7b:e8:f0:d7:3d:0c:d7:5b:7a:0d:
                    8b:13:4f:71:24:8c:42:d8:40:51:20:84:e7:83:8a:
                    ef:2a:c0:76:30:7a:a7:59:12:44:ef:c9:8d:c8:c3:
                    81:01:d2:e4:93:d9:00:79:15:05:4d:7c:e9:2a:c9:
                    6c:32:6e:3a:9f:48:8e:94:1c:a6:f2:fc:4e:8a:42:
                    42:12:e2:0a:39:fd:00:40:b6:89:f4:69:e6:94:c5:
                    9d:41:59:a3:af:ac:45:4e:99:9b:dd:6f:15:ad:f8:
                    da:ef:ec:40:9a:0e:55:74:e1:01:cf:64:74:55:1f:
                    ba:d6:cb:5c:a0:00:47:be:bb:30:b4:f8:9a:4d:c4:
                    08:00:01:f6:67:ec:a9:c7:4a:4f:7e:d5:45:58:be:
                    c8:89:bc:29:0a:a8:3c:9b:89:c5:e5:dc:83:04:5e:
                    b9:e6:ff:23:dc:4e:fd:0f:18:38:aa:1b:e1:c2:b8:
                    88:12:59:c1:71:20:65:1f:88:b1:00:e7:e3:b8:1e:
                    38:35:77:b3:e1:63:3e:b5:8c:92:4c:fc:ed:ba:d2:
                    38:67:ed:b5:f5:0c:1a:d1:0d:8c:36:9d:12:42:77:
                    87:e6:be:7d:e9:a9:a8:48:3c:aa:c4:e2:cd:f0:30:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:57:F4:6F:6E:32:BC:48:16:DA:1B:A6:7B:5D:DB:F1:E7:B9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/328bb8fa-90fc-380d-a20b-f87cfe7a1ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:c6:18:cc:57:d1:22:5c:87:13:7e:99:1f:c7:2d:99:1a:
         7d:6f:77:f0:4e:f9:0e:25:e7:52:6c:1f:1c:19:a7:06:f6:de:
         14:b0:3f:4a:38:ae:49:ab:65:6e:8c:d6:6f:95:a7:81:fe:85:
         2b:02:b6:44:19:f6:a3:5f:ae:f4:ad:f8:4c:43:21:b2:99:c4:
         b8:f0:36:b9:8a:ad:c8:32:a7:9e:bc:8d:94:32:5f:7c:36:3a:
         b4:1e:ea:81:e2:70:33:fa:fb:39:75:e5:cd:e0:a8:87:29:92:
         33:a7:6c:21:73:20:a0:10:1e:e6:cf:9a:40:49:d5:57:aa:1c:
         c4:c7:f2:7d:f9:6a:fc:0c:65:0e:d5:2b:ba:a0:5a:4f:ca:0b:
         4e:8c:83:1e:d3:bd:e3:34:e9:dd:a2:90:2b:b5:60:2d:2d:62:
         ad:45:81:0b:ea:83:7e:43:95:5c:a3:a4:7c:a1:0b:9c:32:68:
         36:1e:e2:5d:55:63:fb:22:df:ec:eb:08:11:9e:53:ca:21:b7:
         b9:d9:02:83:78:5a:dd:99:a5:42:a8:4b:dd:52:1c:27:48:36:
         17:0b:f7:e3:4f:48:55:c3:59:e0:23:7e:77:f6:78:10:c9:e6:
         d7:31:c8:28:45:54:88:d2:e8:54:97:b7:92:2a:e7:da:ea:a0:
         7c:68:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:29 2025 by rpki-client