Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa
File:                     c1308d02-8bb8-3bae-8236-ad169043b158.roa (raw, json)
Hash identifier:          XwWHbOsVGSmGGqoWTTKuBvhy2AXuoSawpHw6xnEv/OQ=
Subject key identifier:   B0:BA:83:83:F5:1C:BF:CA:3D:6B:52:A1:70:67:65:8D:76:35:01:F2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900BE605BE0577299CF3700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        168.91.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:be:60:5b:e0:57:72:99:cf:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=58354c2d-08b5-491c-b06c-8a809f2ec6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:5c:08:ca:86:f9:23:a2:01:ee:19:ec:fb:
                    a5:36:b4:b7:28:23:f9:ae:28:e8:18:9a:0c:40:b3:
                    b6:19:4d:1c:4a:a1:cc:6a:e3:73:33:ec:7e:a3:33:
                    49:c2:1b:7e:50:55:fa:50:68:d1:1b:5a:c3:03:31:
                    75:7d:0e:60:54:eb:79:63:fc:a1:ab:08:f0:dd:a4:
                    b2:84:56:91:74:51:84:66:7b:2b:f1:bf:54:c4:ef:
                    ab:bf:58:1b:cb:a0:d8:32:39:4f:1d:4e:e5:a1:29:
                    58:d4:99:75:18:4a:7d:b3:f9:e0:7f:38:1a:05:c9:
                    95:dd:9e:f6:bc:77:1d:ac:49:44:8b:1b:b5:cc:94:
                    0c:7c:e7:ea:60:da:25:69:99:b9:7b:1a:d8:bf:cc:
                    48:4e:0a:d9:c6:0f:bc:eb:f9:b7:85:cd:53:64:c9:
                    bf:c5:1e:af:70:f8:33:ee:ad:67:dc:62:a8:40:b2:
                    f0:44:fb:47:41:1f:4f:46:dd:c7:a6:98:c2:28:69:
                    ba:dd:2f:5f:8f:8c:06:61:99:86:55:a8:83:24:8e:
                    c7:8a:f6:7e:51:9e:f2:11:c0:07:5b:d2:99:9a:20:
                    b7:e6:af:1c:7f:83:ad:07:49:ef:3f:86:7b:c1:78:
                    70:66:38:d5:34:da:00:f2:92:9d:f2:a6:73:5d:93:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:83:83:F5:1C:BF:CA:3D:6B:52:A1:70:67:65:8D:76:35:01:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:46:1b:6f:94:0b:b5:7a:19:16:58:4f:30:d3:1f:43:15:57:
         29:91:2e:d8:e7:20:65:0d:97:0e:fa:07:47:1a:05:2c:95:14:
         f5:6d:a5:47:6b:95:7a:07:a3:fe:69:37:c1:ce:ea:3a:eb:91:
         2f:19:1f:61:0a:4e:2f:f0:e1:72:9e:47:e4:97:b6:24:5d:65:
         c8:f0:e7:1f:fb:c0:c8:01:cc:62:c4:95:37:87:ad:cf:c8:f6:
         90:6b:d2:a4:1d:ee:ca:d5:ff:a6:a1:b6:d7:d2:df:c2:0e:ed:
         c5:35:54:ec:57:ef:9f:18:21:38:11:52:cc:69:6a:12:d3:3a:
         c8:85:30:40:07:81:08:44:46:8b:01:51:0e:c6:5f:5c:0d:a0:
         5d:20:5d:27:bd:9c:16:1f:05:92:73:d7:d1:75:c3:68:ac:a8:
         75:c2:fd:44:60:75:81:cd:7b:25:17:22:03:b9:f7:57:55:74:
         4b:19:61:df:2a:ff:0f:7b:31:a7:6b:b1:7b:f7:ae:47:16:07:
         52:be:31:ec:c0:6c:c8:5c:be:2c:d2:c7:f1:99:c8:ce:63:c7:
         46:6f:02:e6:42:88:82:46:e2:ab:ae:e6:6e:9f:3f:fb:8c:a3:
         d8:96:88:7f:0f:09:4b:b3:23:cf:68:ee:71:9b:d2:17:44:d4:
         18:c8:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:38 2025 by rpki-client