Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
File:                     ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa (raw, json)
Hash identifier:          vj80eE3toTQGmxcN2lECjHDLSfKgRAhnWjGYTGcZlEI=
Subject key identifier:   3A:3A:55:A8:72:D3:D4:89:0D:69:0A:CA:E2:55:FD:84:11:63:60:6B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9A662BA8B25D198A46D98D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     64267
IP address blocks:        209.59.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2b:a8:b2:5d:19:8a:46:d9:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=e5df6abb-6787-493b-aeb4-12072b9fcb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:30:2c:cf:88:96:78:91:f8:c2:b4:bb:ac:
                    27:75:f4:02:55:07:75:38:64:99:3b:40:ba:7d:bf:
                    0e:e3:2e:27:be:3f:42:4a:82:e8:b1:8e:8f:da:af:
                    5b:1d:95:bd:c9:fc:eb:37:13:08:c5:a2:91:e9:5a:
                    36:77:24:78:ae:ab:68:cf:7f:6c:07:ff:ed:c2:78:
                    10:c1:1d:9b:54:3e:25:07:c4:67:c4:c5:f5:63:89:
                    21:ce:e3:9c:be:35:93:16:c7:ee:d6:c9:ca:be:b9:
                    53:ca:75:63:b8:5a:50:7c:b8:a0:7d:05:1d:03:2e:
                    b7:43:72:cb:13:f8:3a:49:9c:c7:97:e7:11:71:71:
                    d2:8c:72:14:eb:c2:fa:75:61:7b:99:b0:8e:b4:d7:
                    cd:a6:98:4e:02:d6:fe:8e:80:d4:d4:be:a3:4b:04:
                    05:c4:4d:44:85:d0:f7:9d:4d:eb:97:c4:3c:b3:84:
                    64:26:ef:14:da:f6:a4:72:f5:7f:21:cc:73:1a:f3:
                    cf:29:02:43:39:66:cc:2f:99:bf:a4:18:91:d6:5f:
                    7b:26:58:52:57:80:05:01:4b:15:cd:33:9a:e1:ba:
                    8e:1f:16:ad:a6:70:e6:e4:59:d0:94:a6:42:e3:f2:
                    db:0f:89:e2:ca:95:99:d6:07:f6:4e:c4:55:68:8f:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:55:A8:72:D3:D4:89:0D:69:0A:CA:E2:55:FD:84:11:63:60:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:a1:95:fe:a1:9f:b6:5f:84:e1:03:62:eb:85:4d:91:d8:
         04:59:71:78:26:10:01:3d:c7:36:bf:2f:38:4b:c9:90:93:1a:
         83:7f:61:43:22:1d:e7:c6:3c:cf:b3:06:38:ff:3c:0a:89:00:
         b4:3c:84:95:7b:17:6a:e1:50:4f:97:fc:f1:d9:7b:a9:19:14:
         cc:93:7b:81:c1:c8:9d:12:a4:e8:f0:d8:c3:25:c4:13:3d:95:
         95:1b:0b:da:89:08:4b:cb:e5:6b:56:88:b7:58:4a:a6:6c:5d:
         80:44:1b:2e:68:3b:e8:3d:ef:92:60:5b:89:67:3f:f0:94:9e:
         25:1f:86:b1:2b:87:2c:9b:cb:19:43:ae:68:c5:66:b2:4e:f0:
         65:82:d6:12:e4:0e:80:89:c0:4f:88:dc:6f:8d:a5:70:b7:a6:
         5e:47:19:df:ed:1a:00:25:2f:fd:99:b2:fa:e8:c9:60:a6:ad:
         cb:9d:77:f2:02:00:c5:3a:d6:1d:6e:89:a4:2b:f1:44:68:f2:
         64:c2:24:ca:6c:53:79:4f:8c:de:71:6f:82:6f:f4:c9:38:f9:
         a1:5e:96:18:5e:02:7b:4a:d5:64:55:35:79:b0:5c:f2:6d:0e:
         59:76:da:c6:9c:d6:d0:20:20:01:37:2a:15:66:4c:ea:8b:b3:
         ec:31:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:09 2025 by rpki-client