Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b20e789-1237-3c67-aa34-e38277218d39.roa
File:                     9b20e789-1237-3c67-aa34-e38277218d39.roa (raw, json)
Hash identifier:          npeSXavymUsf4Q9tYYjvyRbWa5FCceahta9upUhAYXo=
Subject key identifier:   21:A1:24:73:1A:C4:D5:5C:16:A7:DF:CC:77:86:EB:9B:8A:95:08:3C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A94D0DA21924EC2F4B3198500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b20e789-1237-3c67-aa34-e38277218d39.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        69.58.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:da:21:92:4e:c2:f4:b3:19:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=afe85d09-7bfc-4d54-80ec-1701c149e409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:2d:3c:0a:b2:2a:21:7e:5a:06:b9:ba:5f:
                    a5:f4:42:8e:37:4c:78:ca:88:d4:92:c8:67:de:16:
                    7e:e9:d0:f0:62:6d:0b:4b:48:7d:04:79:3d:2f:3c:
                    57:cc:7b:e2:da:65:ef:58:d1:78:ed:0b:47:fc:b9:
                    d0:66:67:d6:cf:20:c9:14:14:97:7b:88:20:0e:6b:
                    36:fc:c2:b7:ea:84:29:dd:49:5e:e4:0a:69:53:bb:
                    c1:a1:2c:a4:de:9f:1c:76:e3:dc:7f:e3:63:6a:7a:
                    34:a4:11:30:84:3c:5f:f3:9c:10:5c:2f:17:5f:5a:
                    23:f0:ce:31:9b:4e:7f:a5:25:01:8c:46:19:91:86:
                    aa:d2:31:f7:95:52:52:50:61:f0:2d:44:6e:1a:5e:
                    e2:8a:2d:98:27:c1:9c:c2:0e:37:b9:23:9d:0c:e8:
                    65:af:91:cb:d7:8f:5c:57:fa:15:73:df:90:86:ce:
                    0b:3c:08:8a:b5:3e:6a:1c:df:1a:b2:6b:9e:eb:b4:
                    3a:5e:33:19:44:50:7e:9e:42:da:d0:27:db:3b:f7:
                    df:f7:6a:c4:c7:05:92:31:e6:44:d0:2c:e1:14:96:
                    67:d3:8a:8c:fc:bb:1b:15:92:46:e7:7a:bf:af:a2:
                    f1:93:54:fb:ad:48:c1:6c:ba:c3:14:83:7e:a9:12:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A1:24:73:1A:C4:D5:5C:16:A7:DF:CC:77:86:EB:9B:8A:95:08:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b20e789-1237-3c67-aa34-e38277218d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:de:a6:2b:19:6b:c4:57:be:6d:da:62:0a:0c:c5:10:9d:
         1a:7f:ee:c3:b8:c9:af:bb:c1:b3:19:25:30:19:04:f0:44:74:
         5d:db:af:34:de:b1:ef:c5:4a:c4:67:29:fb:64:74:e8:0a:4a:
         47:c7:77:82:d2:47:63:c2:8b:0a:15:52:01:aa:80:46:c0:c1:
         38:67:8a:a4:3b:e1:9e:9d:25:7d:21:c1:65:c7:e8:22:39:9a:
         86:79:2c:40:73:ee:c9:86:3f:70:d0:52:a1:01:64:95:c1:90:
         5b:06:d2:71:02:fc:ac:9d:53:9b:80:c4:8d:89:ca:01:e2:b3:
         e3:b1:3a:b8:79:d5:16:d9:24:5d:6b:91:be:d0:19:0f:99:c1:
         83:bd:d1:19:9a:a5:b8:bc:01:fe:b7:a6:f2:ed:f0:6a:3b:bd:
         cc:3f:51:67:9a:82:2e:1c:18:9e:dc:0a:b9:12:fc:88:2b:7b:
         97:e8:5f:c6:1a:d4:71:a4:4d:d2:fd:bf:1f:b5:bc:fc:29:85:
         23:7d:3d:ca:14:d2:f6:8b:30:d5:e1:0b:10:9c:12:c0:38:34:
         ff:08:15:af:37:6b:78:c3:5b:21:99:1d:f6:71:34:ea:54:70:
         f8:dc:d9:4b:b2:58:d1:e2:1b:1a:81:c1:a0:78:97:a4:fb:39:
         4f:1b:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:26 2025 by rpki-client