Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0e21ab-36a3-30d7-8839-b396fa6351ab.roa
File:                     df0e21ab-36a3-30d7-8839-b396fa6351ab.roa (raw, json)
Hash identifier:          asI7fEl8DADyx+tM9SSKBsdyi6bESAS/mbdmu1SBCBU=
Subject key identifier:   CB:4F:F8:2F:A3:2F:41:6F:A4:FA:6D:32:F6:C8:B6:11:0B:76:A2:DC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9FFBAA732B907C1EC4E3CB80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0e21ab-36a3-30d7-8839-b396fa6351ab.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     64267
IP address blocks:        141.164.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:aa:73:2b:90:7c:1e:c4:e3:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=50b18c91-bc19-460d-9a0c-c0ab6df2f03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:f5:66:c0:eb:a2:20:82:67:71:af:a6:71:
                    79:29:d4:b5:6e:64:94:80:d8:42:e8:6d:46:8b:95:
                    8d:a5:64:c4:9b:e2:cb:e3:8f:5d:dd:15:cf:d6:16:
                    63:6a:ed:cd:be:c8:b7:a3:f7:da:9b:ff:83:d3:b2:
                    64:55:4c:59:a5:f7:1e:c9:53:cc:c0:fb:3f:90:27:
                    08:0f:8f:a4:06:1c:cf:e8:a2:5c:c1:84:7f:09:81:
                    aa:21:3c:f3:86:58:89:3a:ef:e1:01:5d:04:a5:6d:
                    b8:cd:c2:4a:ee:1d:89:8c:cf:e0:0e:ac:0a:44:90:
                    c4:87:4b:2a:b0:c0:df:b6:a3:90:49:30:a3:ac:ce:
                    b2:0f:96:fe:df:3f:2e:6f:c7:ff:ee:2f:d5:b0:d0:
                    91:86:c9:7a:9a:e3:5f:5b:b9:8c:ea:30:97:4f:63:
                    6f:10:e6:ed:58:e1:3c:8b:38:8a:5b:07:0c:3a:a6:
                    14:b4:97:10:fe:ca:2e:15:ac:5d:a8:66:a9:5f:93:
                    08:f5:dd:46:5d:27:8f:d4:d0:29:4b:e3:5f:cb:eb:
                    80:de:e8:73:1e:60:5f:ca:dc:74:7b:29:42:21:a6:
                    1d:9b:0e:c9:64:0d:f6:70:36:3c:fd:6f:df:e1:42:
                    fd:0b:5e:d2:f5:bf:2e:ec:cf:85:11:81:24:a3:b8:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4F:F8:2F:A3:2F:41:6F:A4:FA:6D:32:F6:C8:B6:11:0B:76:A2:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/df0e21ab-36a3-30d7-8839-b396fa6351ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:95:76:ae:f8:57:d1:b9:22:01:68:0c:80:68:83:96:69:6c:
         bc:5a:a5:9e:1f:3c:e4:ed:62:58:33:ff:8a:c7:ea:fc:c3:64:
         65:b8:db:76:32:9e:0a:0d:f7:83:05:d6:a9:84:88:47:dd:c6:
         e7:57:49:19:c7:85:6c:c9:fd:d9:a3:fe:78:e9:a2:cd:b0:0e:
         c2:f2:c7:f5:89:40:10:b8:fc:58:cf:66:58:fa:d4:80:3a:60:
         ec:e8:b2:1c:de:a6:65:c4:2d:ca:0d:6e:23:3b:29:28:22:f8:
         ee:f6:63:7c:5a:99:2d:04:64:d4:f0:42:a0:4a:05:85:55:a1:
         21:40:0b:7b:5f:ce:15:3f:4c:38:df:07:e2:a5:d3:e5:4a:76:
         e5:dc:84:3b:98:82:a0:2c:bc:24:50:5f:ae:7d:00:43:37:25:
         30:5a:68:3c:1d:67:1c:5b:dc:6f:ed:da:95:ab:1c:e6:8f:91:
         2b:59:46:e7:0d:15:5f:ca:c2:ea:54:8c:2f:fc:c3:90:6c:f1:
         34:08:9f:fa:6c:f6:ac:aa:d5:01:81:e0:f2:e8:fc:7a:db:9c:
         b8:3d:5f:67:f3:f1:42:10:5d:53:f6:20:75:73:78:db:ea:c9:
         66:f7:c5:20:cc:62:37:00:3d:14:54:cc:be:6c:9f:82:52:d6:
         43:0a:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:57 2025 by rpki-client