Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa
File:                     f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa (raw, json)
Hash identifier:          q+PJimY5bqHbTwQmuXhAR3l8+Lwi+M3CpNh3S0IalgA=
Subject key identifier:   8C:70:82:23:C3:50:BE:0C:92:06:02:29:B7:CE:60:F2:D3:F7:17:79
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A386D1450A8489D85A8B9A4C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa
Signing time:             Tue 17 Jun 2025 10:45:49 +0000
ROA not before:           Tue 17 Jun 2025 10:45:49 +0000
ROA not after:            Mon 15 Sep 2025 10:45:49 +0000
asID:                     22516
IP address blocks:        170.199.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:6d:14:50:a8:48:9d:85:a8:b9:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 10:45:49 2025 GMT
            Not After : Sep 15 10:45:49 2025 GMT
        Subject: CN=285b6208-4171-49d5-829c-d31609b074ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:a6:bd:57:c1:44:18:8e:ea:d9:d4:68:db:
                    71:ff:2e:95:28:58:33:b7:15:d9:c6:35:40:18:ab:
                    80:29:de:39:a8:7a:0a:f7:44:3a:3e:83:ee:3b:ec:
                    d2:ae:21:c9:58:c1:42:60:09:2d:11:38:0d:fa:c4:
                    78:b9:fd:2c:52:ca:45:db:69:8e:43:47:d4:64:03:
                    21:f3:a9:c7:94:e3:7e:34:97:94:06:58:f6:1a:9f:
                    c3:79:0b:f1:18:79:52:f0:b9:4c:9b:eb:ad:29:97:
                    56:31:25:c1:ba:bb:52:ff:bc:1c:84:2d:40:ca:ca:
                    89:ce:be:3d:76:61:c2:ad:f0:a1:48:95:e2:f2:8f:
                    1f:34:54:be:60:e6:0a:84:49:fc:0e:93:2e:85:38:
                    6a:ce:c7:10:9f:c9:e3:34:64:fb:51:1c:e8:10:ff:
                    83:44:27:f1:51:63:d2:15:dc:f7:e5:9b:d4:d2:39:
                    7b:a4:07:99:66:62:09:f9:ff:6c:cb:71:79:ca:54:
                    82:7f:bf:50:c7:99:a1:8a:13:88:f6:46:1e:b8:54:
                    77:2d:f3:e6:7e:a9:b1:0a:44:f8:5c:67:da:71:2e:
                    dc:dd:bb:99:47:32:0e:a5:bd:b0:8a:6b:f3:2b:18:
                    40:2e:ed:9e:47:6b:65:0b:e4:e3:58:a8:b3:8f:f8:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:70:82:23:C3:50:BE:0C:92:06:02:29:B7:CE:60:F2:D3:F7:17:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4ef38ed-5090-3216-9c9a-753f622a7ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:39:b9:d0:43:1a:46:db:0b:0c:dc:74:ca:37:9c:bb:c1:39:
         60:0b:33:fb:f4:6b:1b:7b:fc:e9:54:ef:04:3e:82:3a:3b:53:
         d4:f8:48:3b:48:30:7a:a7:bf:80:fa:05:4c:79:c6:8b:34:59:
         e6:3f:16:49:e0:d0:98:31:37:9b:c4:d6:ef:ea:37:e1:88:ec:
         bd:c7:45:30:10:13:88:72:bd:2b:8e:9c:bb:62:44:46:89:34:
         b7:69:5e:39:87:02:af:bf:99:cd:2d:42:9e:62:a5:54:b9:ea:
         6a:de:5d:29:fc:83:19:e5:ac:65:04:2a:63:aa:e5:a5:5c:2f:
         8d:a8:26:c5:d0:5c:6e:79:dd:29:b8:52:0a:29:5f:a4:de:48:
         70:62:f0:b1:e9:3e:77:6f:a0:43:e2:3d:5b:dd:4e:65:b2:a3:
         e4:2e:0d:e1:b9:6f:f2:4c:ee:f8:7b:9e:6a:77:1b:74:17:12:
         0a:55:5e:05:4d:ed:52:f3:f0:3e:43:cd:17:22:26:1b:b6:ff:
         2f:58:fc:7d:01:b9:99:ba:c9:64:1b:e2:3a:88:fd:ae:8d:f7:
         0f:25:50:a0:36:67:60:9f:17:2f:00:cd:93:f8:54:2d:c1:54:
         66:1f:53:c2:63:83:b5:2f:a1:06:0c:ef:5b:63:5f:a1:e1:ae:
         d4:46:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:36:17 2025 by rpki-client