Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b24918a-94f7-368d-b573-fb5d7b5f5083.roa
File:                     9b24918a-94f7-368d-b573-fb5d7b5f5083.roa (raw, json)
Hash identifier:          SPzYZXjHv2G0aK0Pp1ve90SCmAdCdRn/oOgjAXCN9gY=
Subject key identifier:   8E:68:C8:E8:C3:53:D9:AA:7A:59:05:88:E2:88:AC:39:B8:5E:D1:5E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900BE19D99F15519224B860
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b24918a-94f7-368d-b573-fb5d7b5f5083.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        168.91.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:be:19:d9:9f:15:51:92:24:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=898080e7-9fba-4940-92c8-0a5be7b39d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:1a:b4:84:e0:91:e5:2c:c9:ba:d8:93:3e:
                    ac:c1:2c:93:18:6c:b5:b6:4a:f7:1b:aa:18:91:3d:
                    b2:83:f3:51:d5:4b:02:55:39:00:56:d4:6d:b5:6f:
                    85:8a:8e:5f:27:d4:bb:ea:34:00:d1:f8:2a:d1:a0:
                    fb:b4:01:82:1e:36:dd:16:2a:f7:2d:ae:46:f9:36:
                    66:13:6e:ab:5a:14:4f:d3:25:99:40:2e:57:23:d3:
                    77:62:99:e1:38:0e:91:d3:8f:db:55:ed:ef:c4:16:
                    30:d6:88:66:8f:29:a9:14:eb:6c:41:c1:71:ed:b7:
                    c5:12:09:38:5a:ff:c9:f4:20:c9:8f:8f:a8:cc:ff:
                    cf:73:1e:e8:9f:30:2a:8f:ab:c2:10:7a:89:e9:c1:
                    59:b7:1b:59:8f:b9:78:b6:f9:cd:90:87:1f:ef:10:
                    b9:48:72:ce:12:47:b7:f9:d3:15:6f:b4:72:d2:bc:
                    c5:eb:af:82:5b:6b:0f:73:fd:01:7a:dc:29:97:12:
                    0a:03:a4:70:96:ae:81:89:2d:41:9d:56:12:e9:f9:
                    b4:30:a1:91:bb:8a:bc:b6:5c:a0:f5:2f:0f:ca:47:
                    e8:58:59:9a:bf:0b:12:78:f9:64:37:46:5f:c9:f5:
                    ee:e9:47:1c:61:b7:67:fd:25:de:0c:42:ec:aa:bb:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:C8:E8:C3:53:D9:AA:7A:59:05:88:E2:88:AC:39:B8:5E:D1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9b24918a-94f7-368d-b573-fb5d7b5f5083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:3e:19:d7:a4:e4:7b:1b:ee:a8:24:48:f9:e9:cd:27:7b:
         e3:57:b7:34:67:31:60:62:61:59:ff:e5:ac:6c:fd:f1:94:2f:
         80:7d:1d:07:a3:bd:42:54:69:13:15:b6:d6:15:9f:a0:f0:9c:
         12:05:cb:17:49:93:8b:a7:e7:28:dc:d0:c6:a2:3e:67:a5:ff:
         94:be:62:2b:fb:0f:d6:81:57:b8:ba:c9:12:95:52:b5:8b:20:
         8d:74:f2:10:95:50:bd:39:49:a9:91:ac:d7:b0:ff:b5:0b:39:
         fc:94:f0:fa:4e:a4:7b:58:f0:d2:46:7d:02:9b:cd:54:1e:29:
         75:be:35:d0:a1:51:27:4e:3a:fd:72:bf:24:71:2b:33:3e:17:
         75:f5:3f:e3:7c:e9:b0:78:a7:09:a9:a5:47:d3:5e:71:98:64:
         1b:ff:74:2c:3f:d3:46:ba:77:44:26:38:57:b7:e1:e8:55:11:
         00:cf:0c:98:55:f1:5e:40:17:80:d8:cc:04:e1:8b:bd:d2:7d:
         52:65:fc:8e:17:10:f0:69:e9:d9:a7:cf:a8:f8:92:ce:62:41:
         f6:23:6a:e8:63:d9:56:14:50:4a:6a:33:8e:b8:9b:d1:86:8a:
         d7:6b:c0:c3:aa:f9:d8:04:99:db:2f:1b:62:4c:39:34:4a:69:
         7a:ed:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:35 2025 by rpki-client