Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa
File:                     c1ec8178-d440-3ab5-ab9d-cf6515699624.roa (raw, json)
Hash identifier:          DjEVCn54VNlrqMkbnhteVvr86vLhXfGc5hwgGyO/23s=
Subject key identifier:   62:89:3B:A2:DA:6C:E2:F9:FB:4D:C9:8A:DC:15:89:4C:22:C4:ED:34
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A03A554B48FDE1838A0113720
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        209.163.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:54:b4:8f:de:18:38:a0:11:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=12795c00-99ea-4715-9000-86118fed1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:c7:39:54:59:ad:9c:cc:49:71:20:50:45:
                    91:19:b0:cd:18:fa:92:bc:8f:68:7e:83:ab:b0:c8:
                    a2:2f:c2:90:40:23:81:9c:6d:4a:92:54:56:3e:75:
                    d9:23:ed:32:f8:4c:b8:c6:4a:fe:6a:cf:09:f7:5f:
                    10:44:f0:dd:3c:ed:e9:d4:8e:0e:e8:2a:91:ba:01:
                    e5:11:6b:0b:70:e9:5f:ca:15:15:52:8d:0e:5c:a6:
                    16:d2:81:1b:24:0e:b0:e0:6b:c2:8f:5f:d0:23:a5:
                    20:48:b6:5b:65:ce:8b:1f:c2:c6:b8:da:f8:20:1a:
                    30:af:0c:db:a5:67:fe:df:10:d1:fe:99:7f:7a:00:
                    96:67:a8:73:43:ea:0f:90:ff:06:71:d7:0f:c8:89:
                    8d:92:90:63:8f:c1:6b:82:0a:87:4d:40:b0:36:f9:
                    d8:69:44:da:00:e8:bf:9b:78:a8:e7:91:7c:ca:48:
                    44:7f:b8:08:79:10:ec:24:de:11:b4:a5:ed:1c:b1:
                    62:ae:46:c6:cc:88:53:d9:22:69:cb:e2:0a:5b:ae:
                    b2:48:d6:ff:bb:c9:27:d4:f2:cf:09:11:05:80:d1:
                    5e:6d:2d:04:a0:43:b0:c4:e0:c0:0c:c3:cd:40:0a:
                    e0:91:fe:52:dd:73:5d:04:65:65:8f:67:c3:a2:64:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:3B:A2:DA:6C:E2:F9:FB:4D:C9:8A:DC:15:89:4C:22:C4:ED:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:04:a3:4c:da:bb:58:b1:b1:63:f0:75:cd:84:f3:b4:b9:87:
         00:af:73:13:ee:a0:04:af:50:52:d0:16:5c:97:66:67:47:2b:
         da:82:5e:48:39:1f:c8:6c:15:1d:d0:a3:b4:1f:ef:b3:84:b9:
         0a:74:90:db:5c:ad:71:2d:3d:10:75:2c:c4:d9:0a:c3:e3:c0:
         6f:1d:7d:91:c4:79:16:ce:ba:19:ee:b0:48:95:98:db:42:cd:
         d1:e6:bf:b0:b9:56:2a:c5:93:3e:f2:6d:48:16:f9:c6:ef:ac:
         20:c7:91:95:1d:3a:69:38:d8:bc:1f:87:1d:05:22:10:9e:2a:
         96:94:52:10:53:17:c3:54:23:0b:a9:91:08:c8:af:82:8d:97:
         26:08:1b:d0:4a:5b:69:ad:d7:b2:d9:c6:86:05:2a:8f:a2:16:
         36:89:8c:29:6f:be:07:33:d3:bf:6b:ac:03:6b:24:15:f9:de:
         f1:01:a7:01:c1:58:6e:c5:d3:39:6d:47:11:2f:de:43:58:22:
         33:8e:f8:3d:30:e5:ce:f0:36:85:02:ee:f4:06:15:c7:b7:83:
         17:97:8b:f7:fd:2f:5f:4d:24:0c:63:ba:60:d3:3f:d2:ec:93:
         91:21:26:b1:b8:aa:67:69:f8:1d:5e:2a:90:9c:3e:37:f5:6e:
         e1:40:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:54:10 2025 by rpki-client