Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
File:                     af7ea332-111a-3537-8c3c-7ca28606f180.roa (raw, json)
Hash identifier:          zVN8LR35UcIaUpsLnmrwz50nPENvmPMg39GE1tLNZSs=
Subject key identifier:   34:03:FA:39:29:0E:0F:88:83:F6:E8:CE:42:FA:9C:B8:49:07:0C:EB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A963695AABEAE378A2F1A6A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        192.171.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:95:aa:be:ae:37:8a:2f:1a:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=35f6b8bc-720d-4aa5-9d94-9fd8bb3b2608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:b4:b7:c0:b1:e5:40:33:53:36:6d:c3:e5:
                    18:12:07:29:ea:0e:55:9b:4f:44:2f:8a:92:36:2f:
                    b4:ce:c8:ce:f4:81:e3:67:9f:3e:47:02:32:75:46:
                    0f:5a:6e:62:88:5c:3c:f2:c8:0d:d3:e7:4f:47:f3:
                    80:93:d4:29:5f:9d:b8:68:69:c4:0f:f7:97:a6:37:
                    24:5f:2c:73:8e:42:bc:fc:db:a9:b9:64:50:0f:e4:
                    f3:9c:da:b2:fa:2e:b1:eb:62:c9:0d:8a:c9:92:15:
                    4d:9f:08:52:f8:34:34:52:1e:1f:e1:47:0b:7c:9c:
                    ae:a2:ad:5e:3a:09:37:de:30:2b:3d:07:42:04:44:
                    08:54:c9:cc:f4:7c:6f:90:e4:df:b6:28:af:d7:26:
                    c6:94:4c:30:3e:9f:46:94:1d:dc:ad:32:b9:30:53:
                    f2:fd:40:10:d1:51:80:4f:cc:3d:37:0a:a5:bb:57:
                    61:22:d9:96:97:1f:d0:e8:51:aa:41:fc:cf:03:7d:
                    4e:4e:34:52:48:d7:95:86:6f:65:6c:9a:6f:7e:13:
                    2f:0d:91:e1:c4:02:d8:79:83:a8:c2:eb:84:18:5f:
                    e5:ac:43:b6:6c:42:0f:56:86:f3:16:05:b9:e9:f3:
                    68:fc:b9:fe:80:a5:9b:66:5b:bc:2b:88:71:5a:86:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:03:FA:39:29:0E:0F:88:83:F6:E8:CE:42:FA:9C:B8:49:07:0C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:e6:a1:a7:b7:82:69:eb:11:00:c6:13:55:60:3e:10:f6:
         f7:14:4a:08:48:04:71:2d:b2:54:7a:20:e4:10:83:21:3e:8b:
         40:26:b7:a7:c4:4a:10:8e:a2:4a:3a:08:05:59:0f:b1:57:7d:
         a0:99:5c:48:f3:ed:2d:16:0e:f5:3f:c5:bf:ac:c4:a4:60:ef:
         27:8f:bf:65:d3:28:78:bf:75:35:d3:96:c4:bc:92:ec:bf:7a:
         08:73:56:8d:e4:b3:a5:53:70:89:11:06:b2:e6:10:71:33:b0:
         ca:3b:4d:29:ba:07:a0:7a:73:38:6a:db:31:08:16:c5:51:c5:
         d3:2f:af:52:fa:28:ad:cc:a3:6b:d5:42:09:c7:be:2e:3f:1f:
         93:d1:e2:5e:cf:c4:bf:39:03:23:c5:a6:8d:fb:b1:80:38:83:
         59:93:0b:86:ab:53:ea:f9:b9:84:53:07:ea:5b:99:4d:b0:a6:
         17:59:ec:93:e3:19:a6:bf:c9:22:66:ba:5f:43:70:9b:86:14:
         13:2d:66:8b:a2:7d:66:79:5d:ea:dd:2b:6d:f6:08:2f:32:64:
         5d:61:8f:ec:bf:15:d9:ab:ff:44:c9:df:4a:d9:94:65:30:fb:
         71:a7:6f:b9:ee:3b:9c:36:d2:0b:b3:e1:04:e7:99:a5:a2:ce:
         aa:18:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:10 2025 by rpki-client