Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa
File:                     a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa (raw, json)
Hash identifier:          2P826RmpjxxAj8RJh8TNgK20iLXBNbgGr4iJDJGOiaw=
Subject key identifier:   21:0F:7B:6F:4D:C9:01:D9:DA:08:71:1D:36:91:E3:49:CA:B4:3C:2C
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584AB69E0EF7B8F19C583B990E80
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa
Signing time:             Thu 17 Jul 2025 22:40:57 +0000
ROA not before:           Thu 17 Jul 2025 22:40:57 +0000
ROA not after:            Wed 15 Oct 2025 22:40:57 +0000
asID:                     5065
IP address blocks:        216.169.100.0/24 maxlen: 24
                          216.169.101.0/24 maxlen: 24
                          216.169.103.0/24 maxlen: 24
                          216.169.104.0/24 maxlen: 24
                          216.169.105.0/24 maxlen: 24
                          216.169.107.0/24 maxlen: 24
                          216.169.108.0/24 maxlen: 24
                          216.169.109.0/24 maxlen: 24
                          216.169.110.0/24 maxlen: 24
                          216.169.112.0/24 maxlen: 24
                          216.169.113.0/24 maxlen: 24
                          216.169.114.0/24 maxlen: 24
                          216.169.115.0/24 maxlen: 24
                          216.169.116.0/24 maxlen: 24
                          216.169.117.0/24 maxlen: 24
                          216.169.119.0/24 maxlen: 24
                          216.169.120.0/24 maxlen: 24
                          216.169.122.0/24 maxlen: 24
                          216.169.123.0/24 maxlen: 24
                          216.169.124.0/24 maxlen: 24
                          216.169.125.0/24 maxlen: 24
                          216.169.126.0/24 maxlen: 24
                          216.169.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:9e:0e:f7:b8:f1:9c:58:3b:99:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Jul 17 22:40:57 2025 GMT
            Not After : Oct 15 22:40:57 2025 GMT
        Subject: CN=a9a1e1bc-72d5-412d-b23c-f750ccab98fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d1:a5:ad:9c:c7:98:ba:c5:9c:10:98:d1:03:
                    f4:e1:47:4d:8b:46:9d:d4:bf:3b:54:f2:c6:6f:e3:
                    92:0e:e7:f0:f2:fd:22:e5:22:4c:87:05:8b:88:45:
                    59:55:d5:86:ea:87:10:2b:96:96:59:55:e1:73:bc:
                    93:64:c4:0a:07:90:7f:36:d6:fe:7e:5b:a4:65:27:
                    50:eb:6b:61:eb:4c:7b:ab:c1:57:8b:2c:c1:bb:00:
                    60:db:76:f7:f4:45:3d:87:17:4e:2a:6e:b5:9d:0a:
                    45:63:ea:90:17:56:d4:37:95:3e:94:c7:ee:bb:c2:
                    67:2d:da:1e:03:ca:29:ae:83:4b:9e:4e:ca:4c:69:
                    71:03:4c:3b:0c:11:5f:e3:79:b6:86:25:78:33:9c:
                    95:d3:c4:6d:23:d0:ea:28:85:69:fc:0a:40:17:4d:
                    b0:c0:21:61:86:ff:db:5f:77:42:ab:5d:7d:39:fb:
                    3b:60:d1:32:80:b1:60:e2:3e:41:a4:ff:68:9c:a8:
                    74:f6:ec:21:c8:33:90:02:69:d8:5a:f8:56:1b:a5:
                    f3:0a:3b:64:64:5f:8a:94:41:ed:30:2a:a0:e1:c4:
                    cb:a9:f9:a3:f1:65:1f:05:b2:b1:25:14:4a:0b:59:
                    49:ef:7a:c2:06:3d:f6:02:48:2b:1a:47:7a:25:03:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:7B:6F:4D:C9:01:D9:DA:08:71:1D:36:91:E3:49:CA:B4:3C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.100.0/23
                  216.169.103.0-216.169.105.255
                  216.169.107.0-216.169.110.255
                  216.169.112.0-216.169.117.255
                  216.169.119.0-216.169.120.255
                  216.169.122.0-216.169.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:99:5a:e4:13:d0:d7:3a:3d:76:0f:3a:91:a0:87:b4:83:eb:
         10:61:71:59:05:90:b2:dc:86:a3:88:4b:9b:51:d7:b9:22:c4:
         08:40:e9:9e:f9:86:ff:ed:2a:df:fa:4a:82:ee:fd:3f:54:0d:
         b7:fe:e0:e9:dd:59:6e:41:5a:f9:6e:cf:0a:70:5b:4c:61:a8:
         cb:ed:67:af:db:b0:be:0f:6e:d5:d0:eb:af:e0:a9:89:e6:87:
         28:a0:23:2f:f3:b6:4a:99:b7:93:3f:4e:9f:71:0c:a9:ff:c4:
         50:70:b8:26:11:8d:36:20:75:39:01:34:62:b6:84:2d:2c:b8:
         f2:0f:08:63:7a:af:9f:9a:71:2d:a8:a2:b8:ee:38:5d:be:87:
         78:ed:0e:ad:98:2e:39:82:38:25:bb:ca:7a:ee:89:35:03:2f:
         c5:5c:ea:d8:33:cd:29:6d:1f:9b:ae:8d:45:fb:bf:8e:6b:be:
         cd:f9:8c:dc:40:19:8f:94:91:14:6b:57:8a:2f:de:d5:24:18:
         5c:7c:e3:ac:55:dc:ac:09:e1:f5:53:8a:33:dc:9e:da:f7:56:
         b2:3f:61:bb:37:41:f6:26:51:f2:24:9c:5a:6a:51:7e:84:91:
         3c:3c:6b:79:11:c3:24:88:d2:be:83:7f:b9:e5:82:59:1a:b5:
         f1:11:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:01 2025 by rpki-client