Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa
File:                     16e55f52-0a7d-3e51-b2cf-828786085499.roa (raw, json)
Hash identifier:          naLDfe2+xseyoUWNTrGFUlGVSlZhkb4b4QHm6GPdR/4=
Subject key identifier:   02:94:C5:47:5B:A5:16:A9:06:77:60:EA:C7:2A:A2:A5:17:A5:6A:AA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A0F7E5C8DE18AC748ECA880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa
Signing time:             Mon 23 Jun 2025 18:21:48 +0000
ROA not before:           Mon 23 Jun 2025 18:21:48 +0000
ROA not after:            Sun 21 Sep 2025 18:21:48 +0000
asID:                     20001
IP address blocks:        168.91.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:0f:7e:5c:8d:e1:8a:c7:48:ec:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 18:21:48 2025 GMT
            Not After : Sep 21 18:21:48 2025 GMT
        Subject: CN=6c1161c5-3414-4592-9208-a30e0a689e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:01:e4:b8:ab:32:da:4f:90:ea:7a:9a:f3:
                    d5:8e:ed:91:e2:21:6a:f7:c7:ec:66:09:c3:fd:27:
                    df:11:ac:00:de:b7:d3:ad:7a:71:e2:6a:74:4f:95:
                    d3:a3:ba:60:11:2a:e2:15:54:6d:65:33:b0:b5:87:
                    e9:94:5e:a6:c2:88:0f:4d:12:c0:c1:56:16:9c:9e:
                    d0:c4:81:f8:ba:82:fc:48:f3:b9:2b:1f:89:e0:0c:
                    9f:9b:a8:a5:a0:bf:ec:aa:3c:56:fb:c2:fb:c8:dd:
                    65:48:8e:2f:5d:b5:6a:01:93:eb:a1:14:4b:5f:ff:
                    7a:eb:cc:33:b5:46:1c:50:5f:19:4c:87:91:d0:f6:
                    97:65:d2:b1:88:4a:7d:a3:95:b5:80:fe:9b:6c:3a:
                    1a:22:02:70:d2:df:0b:61:40:09:0b:e5:4d:0f:e1:
                    90:ff:6a:7d:63:20:ad:79:a5:a1:27:c0:d6:25:8c:
                    63:21:2b:ca:c5:19:e0:50:d7:11:cf:3a:70:8e:0a:
                    51:37:2d:75:f1:f2:9b:58:b0:2f:51:a6:19:ec:a0:
                    3a:0e:77:7d:9d:3d:24:53:b4:19:5a:ea:3d:c3:e3:
                    80:0c:1e:79:a7:b0:e3:f7:f3:18:ac:12:c0:7d:74:
                    2d:d7:4b:cd:c7:76:90:06:e1:87:63:6e:e6:35:a2:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:C5:47:5B:A5:16:A9:06:77:60:EA:C7:2A:A2:A5:17:A5:6A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/16e55f52-0a7d-3e51-b2cf-828786085499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:a6:b2:af:95:55:31:be:79:81:6c:be:1d:ee:07:ed:e5:c7:
         7e:ba:4e:f0:bb:e2:d0:1c:4a:03:cc:fd:0d:14:dc:53:b3:59:
         00:62:9c:65:be:62:75:90:61:b1:9a:fd:f5:dd:cf:d5:aa:0f:
         13:0e:8e:7b:39:25:1e:58:5f:c6:3e:fd:66:b9:f0:fe:19:51:
         72:fa:90:8e:45:31:78:b3:e9:89:1c:b6:6b:af:fd:63:47:fe:
         35:78:a1:8a:58:f5:75:ea:8b:e6:31:44:90:1a:8b:aa:5a:6e:
         85:64:fc:0c:c2:7e:4b:03:d6:3f:48:c8:a6:c7:e9:24:5b:36:
         25:33:da:dc:34:89:0b:1c:18:21:35:f6:e5:60:35:6a:72:8a:
         70:13:fe:e8:bd:40:bf:d6:fa:db:f2:ed:7e:76:ad:42:b2:b7:
         21:1b:b5:e8:02:3c:e3:14:52:5d:1f:02:ec:87:b9:af:c2:2e:
         f5:c1:4b:76:8a:f4:3a:59:19:dc:ac:69:78:ca:98:27:f8:73:
         ba:49:e9:31:b3:2f:19:32:32:d2:bc:d0:74:7a:0d:5a:ac:4e:
         99:e0:a5:32:20:aa:06:dc:67:bc:c2:fa:28:66:eb:04:ef:9e:
         a1:62:ee:a7:c5:bd:d1:e6:69:fa:9d:c3:ed:8b:34:e5:61:94:
         97:2b:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:35:54 2025 by rpki-client