Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa
File:                     fe865831-434a-3edf-910c-d4efd3c3a796.roa (raw, json)
Hash identifier:          aox6eHmAOEGsrwn8zhl87kiBpBfusZGDTZ9+tVE+Wp0=
Subject key identifier:   F4:96:87:9A:EB:27:1C:AE:B4:99:72:67:75:0B:4A:C6:2A:3B:B9:63
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584BB88D23651288FD53AA8377E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        170.199.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:23:65:12:88:fd:53:aa:83:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=297cc457-fb28-453a-ba09-08524e7ab3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:fb:3c:12:fc:d7:fc:97:87:13:7a:ab:4d:
                    b4:49:a3:fe:5d:96:3d:1f:10:45:f7:47:4a:f6:7b:
                    c8:2f:e0:21:90:22:3a:f7:54:d4:95:68:5d:e1:a0:
                    84:5e:f6:7b:72:51:8f:8a:e2:b1:47:2e:ae:57:67:
                    e9:0f:74:40:8c:25:5a:4f:9b:cd:42:eb:00:64:93:
                    52:f1:74:a5:be:84:53:ed:3c:c8:6a:da:d5:8f:5d:
                    ad:34:72:0a:29:b1:9e:9d:29:48:74:93:85:2d:2b:
                    b0:bf:1f:e9:3f:c7:8c:15:be:b5:fa:4b:42:b8:b8:
                    97:a2:de:8e:0c:ad:0f:89:dd:f4:07:73:df:9e:73:
                    ca:8a:dc:b0:01:28:0e:91:38:97:4b:26:6c:2b:71:
                    6c:fb:ae:c8:2c:1f:11:54:3f:7a:6e:f7:56:34:0b:
                    08:7d:4a:01:d1:0c:a1:26:d8:dd:d6:51:37:2a:15:
                    22:65:f3:f8:3d:e8:3d:c4:e7:43:5a:5c:07:ee:2f:
                    06:31:93:64:70:3a:3d:73:d4:c0:d5:94:03:2d:26:
                    64:98:6c:4b:a4:9f:34:cf:79:ae:4f:e3:ca:41:52:
                    ac:d2:38:11:bf:3e:db:ed:4a:d2:85:61:62:5f:e0:
                    49:ba:f0:f8:be:f4:21:18:b2:a3:0c:b7:fe:0b:34:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:87:9A:EB:27:1C:AE:B4:99:72:67:75:0B:4A:C6:2A:3B:B9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:6c:42:ba:3a:6c:68:65:7b:5a:7e:e7:6d:78:c9:2f:3d:4d:
         71:ec:77:d8:77:7b:6e:25:a9:6e:58:8e:3f:e5:7b:61:bc:ef:
         fa:8f:21:7e:4d:cb:49:5d:b5:d8:32:e8:6a:05:59:12:fc:5a:
         ed:73:a7:da:0e:f5:a0:77:4a:ea:44:4f:74:6c:0b:58:cf:14:
         1d:bc:5f:19:1c:3c:fe:4f:c1:09:87:a3:7c:c7:c0:62:73:aa:
         b8:2f:8d:5e:24:25:57:c3:14:3a:0c:13:3f:02:fb:ed:e4:bb:
         81:9f:6a:0b:7d:f3:00:15:18:6c:d2:6a:46:24:bc:18:05:04:
         f3:0a:98:d3:1c:68:e5:6f:af:0a:9d:fe:6a:d8:79:99:d4:ce:
         2c:81:07:0f:e1:b5:a9:b9:91:59:fa:d7:c1:bc:a5:9e:01:b7:
         fa:6f:62:04:21:bb:dc:56:b9:d4:b2:01:59:00:fc:6b:7e:f9:
         58:4f:5d:6d:0a:6f:3f:9e:a8:f4:15:d9:81:10:38:71:1f:93:
         ea:a4:f3:23:65:47:9c:33:5b:5b:a4:3e:78:3c:94:49:64:5f:
         c7:f4:06:32:14:70:d1:b5:3c:2a:dd:8c:9d:73:19:2f:4e:e4:
         34:0c:b2:15:d6:cd:63:80:5b:96:d7:3e:9e:b9:b0:87:f1:d7:
         e1:0f:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:17 2025 by rpki-client