Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
File:                     e1b29e8b-b39c-3622-80d7-999b82e0b378.roa (raw, json)
Hash identifier:          ERDLd5b8g42uMKK9z3CIw/8gAsWFRW2WMZXx8UZGTq0=
Subject key identifier:   23:FA:53:0A:7F:36:BC:F7:BA:23:C4:9E:0D:D7:43:2F:D1:29:88:46
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900BDFB845B12751C81BA80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     64267
IP address blocks:        168.91.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:bd:fb:84:5b:12:75:1c:81:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=0e35d901-890d-4130-a472-83d62dde641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:a0:0e:ad:94:9e:f8:11:77:19:09:a8:4e:
                    08:1e:77:52:09:25:10:3b:04:74:de:93:b4:9d:76:
                    d9:63:25:97:7c:59:b0:9d:51:df:f8:4b:5e:5c:eb:
                    26:ed:2d:c2:23:b9:21:57:30:ec:c8:32:9f:87:b6:
                    50:6a:3e:40:09:fb:68:bd:65:05:31:66:f6:c9:0a:
                    f0:fd:c5:cd:b7:e3:8e:7b:cb:4b:df:67:ce:2e:1e:
                    5d:c4:f1:60:d5:b4:b5:fa:a6:ee:29:d5:32:d0:97:
                    5b:96:32:6f:14:73:b6:d5:28:89:37:9d:c5:13:bf:
                    31:ab:93:f0:87:27:5c:66:76:ea:86:2c:a0:72:32:
                    c2:5a:5a:13:68:f5:09:12:f9:27:d3:33:3a:94:83:
                    45:6c:af:62:bf:ec:5b:b5:58:c8:27:fd:aa:70:f3:
                    a2:9b:44:8b:34:a4:fc:bf:50:14:55:cd:eb:eb:87:
                    cd:ee:98:51:86:d4:34:88:34:e9:38:eb:76:c3:49:
                    13:f6:29:a9:0b:fc:98:2e:66:10:3a:3a:11:de:fa:
                    f9:92:93:9c:3d:85:b6:e3:7d:d0:9a:cc:73:53:05:
                    26:cf:c4:82:3e:9b:be:7b:00:21:a7:83:b8:e3:82:
                    01:22:33:91:e3:bc:fa:1c:84:ab:34:18:33:b1:ee:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:53:0A:7F:36:BC:F7:BA:23:C4:9E:0D:D7:43:2F:D1:29:88:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:2f:bd:f0:7f:c0:35:c5:ba:e3:18:bf:e1:16:f3:73:08:
         47:8d:8b:3b:db:d9:c0:f7:cc:17:97:19:c5:a2:1b:5d:fd:7e:
         ba:50:f2:ea:c8:8f:23:a7:66:91:ae:d4:18:58:1b:8b:e3:9c:
         c8:51:5e:7a:b1:6c:5e:e2:88:eb:77:a5:cd:86:0f:c6:49:11:
         b6:d9:d4:1c:a6:c3:b6:dd:a3:92:c1:e0:39:67:57:2d:ad:b5:
         e5:ac:19:99:9b:9b:f0:72:4d:e6:03:cd:ad:7b:b0:1b:05:03:
         80:cb:f1:89:38:77:5c:a5:68:f6:79:77:80:b0:fe:b2:e0:4d:
         d9:ea:df:86:c7:be:bf:e4:01:2b:4e:cd:9f:2d:f0:6b:41:e5:
         95:cf:44:f9:44:fc:a2:1f:73:3f:d5:a2:da:da:7c:c5:49:5f:
         07:d3:3d:9a:6f:20:93:1f:5c:74:49:00:cc:bb:7e:6b:3f:dc:
         02:c8:e2:a3:ff:f8:91:59:89:74:e6:49:2e:91:91:f3:ff:4a:
         20:ae:0d:d9:5c:f9:bf:05:38:f0:96:97:da:d8:75:85:65:42:
         f2:ae:c1:4d:72:3c:fe:d6:3d:5e:04:21:90:b0:8c:3c:08:5f:
         df:d1:a5:1c:82:8b:9d:6e:bb:e2:9c:83:d7:07:00:93:47:32:
         4f:74:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:53 2025 by rpki-client