Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8cb3afd1-bd10-3a4c-9eea-69338cd96a5e.roa
File:                     8cb3afd1-bd10-3a4c-9eea-69338cd96a5e.roa (raw, json)
Hash identifier:          CiuKIM4WowjsMQwKS+zUB3/D18p1uufgCSYPqN5yUnc=
Subject key identifier:   F8:BE:75:CA:13:2B:B2:EF:35:77:C5:02:D6:8C:28:D2:CD:3D:BC:C1
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584A89A6180BFD3F213E6AFF3440
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8cb3afd1-bd10-3a4c-9eea-69338cd96a5e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     10390
IP address blocks:        204.194.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:18:0b:fd:3f:21:3e:6a:ff:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=2b33ab98-e559-40bf-b22b-7806913d5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:26:a5:12:cb:24:5a:76:cb:56:a6:1c:da:
                    f4:cb:fa:ca:f1:f6:04:f0:65:fc:19:2e:a5:87:57:
                    a7:6a:a7:67:8f:02:f4:19:12:b1:17:39:42:94:80:
                    55:5c:59:75:b6:45:f5:43:83:6a:10:99:68:b6:2e:
                    67:62:ec:c8:30:10:f3:96:6e:0f:43:51:62:4a:54:
                    80:67:92:e1:ed:9b:cb:9b:fa:0b:8f:94:ae:3a:84:
                    1b:dd:e5:b9:92:96:af:a9:b8:94:47:7d:c0:3c:d9:
                    c9:3b:6e:f3:9f:b6:d3:dc:31:26:83:ff:73:fb:f4:
                    03:7d:11:d9:92:bf:39:50:5c:45:32:39:7e:4f:c2:
                    e5:e4:be:d3:7f:1e:03:7c:8f:f3:82:b5:ea:61:db:
                    75:44:c6:c6:72:37:b9:3f:36:63:12:52:b8:5b:7c:
                    c0:86:e7:36:9b:a8:ea:6c:70:f2:79:96:40:89:f9:
                    f1:00:32:5a:e2:49:3a:29:a9:e2:95:05:9f:10:d9:
                    1f:44:00:e9:9f:72:0a:84:24:e4:ca:4a:4b:0d:22:
                    6d:25:aa:bc:ba:cc:11:7e:88:c0:47:e5:53:d0:b7:
                    ab:65:d7:89:68:83:bd:45:29:54:f9:70:8f:e1:11:
                    90:ee:26:67:63:11:c6:6c:e3:67:21:1f:e8:1c:52:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:75:CA:13:2B:B2:EF:35:77:C5:02:D6:8C:28:D2:CD:3D:BC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8cb3afd1-bd10-3a4c-9eea-69338cd96a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:26:a7:41:d4:12:6f:a5:a8:5d:d1:53:a0:6b:b0:7a:58:09:
         dc:f6:9d:bb:b4:b4:7c:4d:35:40:c8:c9:1b:ff:85:56:38:8c:
         6c:22:7b:4f:fa:2c:f2:e2:e8:9f:7f:1e:1a:75:e6:e7:c8:dd:
         e9:b8:db:5b:4b:57:11:8c:f8:5e:1e:0d:76:3a:23:86:15:84:
         bc:c0:58:62:bf:18:5d:57:4b:9c:95:87:f2:6e:23:0b:9c:09:
         3f:94:8e:f1:28:47:fb:22:08:fd:b1:da:bb:29:b3:68:a2:a7:
         93:f3:2d:f9:68:7e:b9:dc:ad:e5:72:c4:c2:f1:b1:45:48:f3:
         99:5e:4c:64:f7:3b:a4:35:7e:40:3a:4c:22:d3:64:b2:20:3d:
         49:5d:0e:4e:94:eb:28:2b:87:af:cf:e2:08:59:b3:6f:dc:79:
         12:c6:13:c0:f4:4b:cc:0f:80:eb:d0:47:5c:c2:71:8d:11:0b:
         1f:bd:fe:79:40:7a:d2:c5:b8:f8:9a:96:9c:b6:11:2b:d0:f1:
         e3:d7:5b:55:f5:18:81:f0:c8:d6:75:28:39:07:40:3c:a5:d3:
         97:28:16:fd:aa:42:ef:c4:5e:cb:6d:35:a1:14:3f:65:ba:16:
         40:e7:a5:7d:32:73:8d:5c:38:6c:7d:a2:df:a1:0f:51:51:0d:
         5d:de:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:23 2025 by rpki-client