Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
File:                     c41a86d5-a591-3154-84bc-09af501607e7.roa (raw, json)
Hash identifier:          6xH1OJnCHZP8kI+zbGzn0NtltiU9a20uyTOmu1BcxEI=
Subject key identifier:   1A:61:D6:32:89:E6:F8:30:D5:81:95:34:61:1F:40:A5:01:C0:83:46
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584A00DAB9E34BC658531EE5B180
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        172.110.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b9:e3:4b:c6:58:53:1e:e5:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1dab4bb5-8f3a-4bb3-97a5-b09b7baf0121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:85:1c:d3:a3:21:6d:62:37:3a:b1:34:1a:
                    02:90:96:a8:30:5f:8b:42:07:57:df:5b:af:c7:06:
                    75:9e:be:a5:0a:95:39:dd:d1:ff:83:fa:cc:77:5d:
                    c3:a1:3a:72:02:f8:68:2d:bd:96:16:54:c6:79:00:
                    69:9f:69:a2:6d:82:ad:a4:f3:69:03:c6:00:1f:f8:
                    68:43:98:20:82:b4:48:38:e6:05:e8:b0:f7:4c:94:
                    4f:ab:d0:a3:aa:73:6e:a2:4f:eb:7e:d9:38:7d:0e:
                    03:4e:43:1d:3d:33:a5:af:26:7a:1f:f3:80:df:9a:
                    16:5a:86:b3:f8:4b:3b:50:9f:f4:b5:71:c9:4d:7f:
                    92:80:19:cf:d8:e1:22:18:79:bd:2d:15:9e:e1:b5:
                    fc:bd:74:88:07:12:6c:f2:61:c8:09:01:1f:8f:96:
                    3b:6c:e9:78:e5:f2:64:a3:d5:8e:24:b0:da:1a:9a:
                    d1:c8:65:64:41:8e:d8:4e:02:8d:f1:47:26:1b:19:
                    21:8c:00:69:b5:45:24:91:28:8c:6f:d6:30:0b:32:
                    db:6a:57:76:6b:8d:60:41:c4:55:cd:4c:2c:83:af:
                    1e:34:54:d4:98:8a:46:9a:f5:7c:96:b6:83:88:5d:
                    1a:de:5c:0e:eb:7d:1b:b4:d6:4d:e8:78:97:81:0f:
                    0f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:D6:32:89:E6:F8:30:D5:81:95:34:61:1F:40:A5:01:C0:83:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/c41a86d5-a591-3154-84bc-09af501607e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:6b:cf:a0:dd:80:25:3f:57:45:0b:f1:69:10:e8:f9:3a:
         00:58:cc:dc:49:4e:ac:04:4d:cb:ab:50:1e:2e:97:f9:a4:d2:
         70:dd:ca:d2:ed:4b:6a:bb:e5:ad:8a:e8:42:4c:c9:c7:1f:3c:
         b8:76:3f:ea:8d:33:72:50:19:38:3b:0d:30:5b:93:74:64:1f:
         81:5e:a4:e6:6e:fc:dc:08:88:bc:61:9a:6d:1c:25:31:1c:fc:
         36:bb:a4:2e:e0:86:75:75:3c:4a:f6:94:25:eb:b5:ad:cf:6a:
         4f:77:f2:c8:dd:2e:bc:5e:8c:17:64:4d:4d:e6:f3:b0:24:50:
         d7:cc:c9:3a:b6:04:b4:7d:a6:08:a6:b3:13:92:29:e4:ab:80:
         73:98:f4:b9:c2:b0:a6:0b:d2:b3:bc:29:0b:e5:6d:32:65:61:
         d8:c8:38:87:1a:0e:91:39:ab:bc:23:c8:fb:7b:11:f4:d8:65:
         37:1d:07:8a:30:b3:7a:59:4f:02:ee:c8:c4:3d:d4:66:8a:bf:
         2d:9b:81:e3:07:7f:1b:d2:46:5e:5c:0f:ab:80:a0:a9:8d:21:
         5e:ff:ad:05:a6:44:cf:99:86:19:5f:32:bc:57:8b:45:19:67:
         d4:e2:ab:01:fe:b0:24:26:b4:a7:72:e0:71:7c:1f:54:72:87:
         bd:29:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:24 2025 by rpki-client