Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa
File:                     c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa (raw, json)
Hash identifier:          G95uAatX5/dmH2UUCGwWA2OBC5i2qBNDp3fEMf+rUok=
Subject key identifier:   B1:3A:2D:CD:7A:96:6E:E5:EA:DF:61:62:C8:1E:50:1E:60:80:33:67
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A386E9A344AE5568FAB51A8E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa
Signing time:             Tue 17 Jun 2025 10:48:53 +0000
ROA not before:           Tue 17 Jun 2025 10:48:53 +0000
ROA not after:            Mon 15 Sep 2025 10:48:53 +0000
asID:                     22516
IP address blocks:        170.199.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:6e:9a:34:4a:e5:56:8f:ab:51:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 10:48:53 2025 GMT
            Not After : Sep 15 10:48:53 2025 GMT
        Subject: CN=6ac75463-b69e-4c54-b0ef-a376dd659e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:1b:0e:14:b6:c6:31:ca:4e:12:c5:9f:b7:
                    0c:e3:93:51:23:41:3c:90:40:e5:9d:54:da:38:12:
                    bd:23:e9:28:34:b4:47:06:24:d9:31:79:52:4e:43:
                    1e:20:f1:c3:c7:9b:dc:6c:35:60:34:2e:67:a6:b2:
                    c0:c2:a8:7e:44:81:7a:7f:87:9f:37:4a:a8:07:05:
                    b7:d0:a9:3b:be:be:1b:f3:1a:05:b6:a9:12:14:8c:
                    28:4b:44:a2:48:e9:69:da:d5:20:99:bb:e9:60:da:
                    81:69:fd:4b:1d:7d:28:cc:d3:81:c1:bc:4a:9d:27:
                    0c:58:fd:2c:fc:02:7a:d0:c0:c2:5f:8a:d9:af:c4:
                    90:18:0b:36:25:58:39:a9:be:33:17:5e:0f:c5:13:
                    2a:ed:cc:28:9e:95:62:65:be:76:60:7c:d3:5e:51:
                    de:3c:40:5f:85:27:d4:ef:c8:45:98:b3:d9:1f:8b:
                    17:41:5a:08:a9:da:5c:5f:91:74:db:26:35:38:21:
                    a3:20:cc:e6:4f:1b:f4:a3:3d:2e:60:fe:fb:f8:d8:
                    e7:e7:e4:c2:4e:8c:f5:87:41:27:f3:3d:76:68:73:
                    69:c7:0f:53:c3:a6:96:6d:4c:94:d0:19:94:a0:a4:
                    ba:79:20:25:89:6f:19:5b:96:47:c6:58:df:d7:e0:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:2D:CD:7A:96:6E:E5:EA:DF:61:62:C8:1E:50:1E:60:80:33:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:d3:bc:5c:1e:84:84:ae:3d:6a:a7:8b:a7:d3:0e:59:95:
         43:3d:0b:01:14:70:6d:91:ea:07:23:fc:fd:22:9c:40:55:77:
         a2:26:dd:f1:19:99:14:37:ea:ac:ba:7f:b8:06:bb:bc:2b:de:
         ad:ab:c3:40:27:2a:dd:aa:de:b1:30:88:93:92:73:79:ef:4f:
         24:f0:9a:1f:aa:f5:46:28:55:f6:88:82:c1:e9:30:eb:c8:be:
         e3:87:63:3b:32:bc:be:31:f0:c6:d4:10:50:3f:0a:cf:3a:e1:
         ea:a8:b0:61:6f:57:39:53:13:50:90:6b:85:c9:6d:6d:7e:91:
         fa:71:2d:6f:2f:e2:04:79:05:cf:33:33:e4:d1:d2:97:69:33:
         52:4f:e3:59:fa:34:0f:96:db:c0:d3:b0:bb:9b:91:25:e4:74:
         e9:a5:c0:30:c0:06:aa:1f:2c:36:b8:3a:e3:c3:4e:ed:c1:e1:
         ef:03:69:b5:f5:ed:d1:a6:78:85:29:9a:12:6e:c5:fc:7d:5a:
         8c:34:b5:45:d3:2f:c8:1a:6e:b7:b4:34:01:0e:ac:bf:34:b8:
         3f:47:37:e3:59:64:fc:17:87:01:26:13:f5:01:2f:36:b9:4b:
         10:9d:82:e1:f3:73:c3:66:4a:b9:38:0e:4a:ef:a7:1d:92:98:
         09:1a:56:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:38:29 2025 by rpki-client