Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa
File:                     8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa (raw, json)
Hash identifier:          EzqrmIVNSVdYHYmIteI/aUKZrDZr0cYlPDsVh6baU+c=
Subject key identifier:   88:A7:D9:80:5A:97:1C:57:6C:0A:47:40:A1:48:BE:30:3D:EC:5E:26
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A386D7CB160D064C53D762700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa
Signing time:             Tue 17 Jun 2025 10:46:38 +0000
ROA not before:           Tue 17 Jun 2025 10:46:38 +0000
ROA not after:            Mon 15 Sep 2025 10:46:38 +0000
asID:                     7029
IP address blocks:        170.199.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:6d:7c:b1:60:d0:64:c5:3d:76:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 10:46:38 2025 GMT
            Not After : Sep 15 10:46:38 2025 GMT
        Subject: CN=612673f5-cb97-45d1-a315-9c9d0ffa07d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:34:0b:41:a0:a1:63:fa:69:2c:21:a5:db:
                    3d:50:a1:b6:8b:b8:d7:64:2c:6a:72:e9:23:90:24:
                    71:c8:ba:c1:52:f6:f5:37:a0:3f:33:ec:18:e8:aa:
                    18:fc:5d:db:9a:b4:c3:9a:ea:91:5e:e0:be:33:39:
                    81:cc:55:b2:59:a1:c3:a7:07:b8:16:ca:91:b7:0e:
                    37:65:3c:e1:11:d5:c4:fd:60:39:5a:a7:00:6a:b5:
                    86:cc:5b:ff:a1:8a:55:57:17:c6:fd:a6:e3:6a:8a:
                    70:93:98:e1:0f:16:48:be:5c:57:4d:19:bc:4b:84:
                    3b:33:e4:5d:10:74:2f:dd:99:a5:a4:ce:f4:7c:76:
                    1f:7b:77:1d:ef:ef:02:31:ba:1e:63:6b:03:1f:a5:
                    99:87:30:d4:10:2a:63:b8:6c:f4:81:e0:22:70:5a:
                    c2:f9:da:2c:2c:ce:e9:13:78:02:36:41:ec:93:3d:
                    13:b4:92:b4:17:11:a4:f4:51:c1:21:d5:84:30:c9:
                    c1:43:66:5a:f1:b6:f0:9f:8b:34:fd:a3:a7:5c:99:
                    e0:71:ef:7e:f2:ac:2b:c2:7f:4a:60:eb:0d:fd:a6:
                    51:7d:23:38:a1:a8:8c:8d:4e:43:48:b1:dc:f1:cf:
                    74:cc:b5:37:7f:31:68:97:5e:9e:44:d8:6e:08:ba:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:D9:80:5A:97:1C:57:6C:0A:47:40:A1:48:BE:30:3D:EC:5E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:96:de:d1:d6:4c:30:bd:78:75:7d:4d:67:75:68:35:26:
         4c:c4:90:68:bb:f2:8f:d9:32:05:1e:c8:5d:14:d7:62:fd:f5:
         9f:ec:ac:35:7d:f1:4d:27:0d:20:ad:7b:25:be:1c:f3:95:54:
         75:00:9a:3f:5a:26:29:11:fe:b4:d5:12:6e:56:2d:1a:02:81:
         18:4c:a9:b7:87:2b:5f:91:ec:a6:4c:1d:70:b7:2d:5e:9c:c2:
         8b:9c:b5:ab:ab:34:a8:5f:9a:c1:e8:2a:a9:48:b8:34:39:c4:
         bc:c9:a6:d1:cf:ea:e2:30:04:c5:cc:3e:b0:f6:db:07:99:49:
         47:4e:50:11:e8:b7:a6:fa:a3:f2:c2:a6:a3:e6:3e:91:db:2f:
         2f:fc:05:94:6e:8b:29:32:bf:ba:aa:ad:7d:07:43:f3:0d:7f:
         76:5b:b9:71:7c:5e:25:dc:c8:ee:6a:8a:fd:61:67:67:67:e7:
         b5:20:18:0d:6a:d6:0c:ad:f2:68:90:6b:b4:72:54:0c:c6:a9:
         25:b4:d9:44:46:45:ad:ea:13:24:9c:d9:b3:8b:63:19:ac:b9:
         49:87:c4:dc:a3:bc:3f:e4:90:80:72:28:ed:d0:5a:84:99:78:
         ed:8d:a5:b0:0c:ac:b9:18:97:3c:4e:16:1e:d8:c5:35:00:19:
         70:cc:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:03:53 2025 by rpki-client