Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa
File:                     2d90174b-4e4d-398e-ac98-8a3276625c7d.roa (raw, json)
Hash identifier:          wVUhx8CoUVVgrt9o3imPKjw1oDn5POe6trSTbLwMnUw=
Subject key identifier:   B8:63:2C:7C:BB:1E:0B:CC:68:9E:33:5C:20:4C:F2:A7:9E:13:4A:54
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849DC8FC206A034BEC59E430500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c2:06:a0:34:be:c5:9e:43:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=48bb4ed5-cfd1-4eab-8597-9c56aba377e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:c7:f8:2e:64:05:41:ec:ba:35:b1:f0:e0:
                    a4:1a:20:2a:5c:48:6b:15:97:99:91:c5:0c:66:cf:
                    6c:1e:80:e9:39:6e:4e:b3:ac:f1:0a:55:77:6a:57:
                    16:d8:33:52:77:fa:86:f3:9e:ff:cc:d1:a6:87:61:
                    0b:10:bf:76:16:c0:68:38:10:dd:be:de:cb:3c:ec:
                    d5:46:2c:1e:1d:48:e4:b7:15:9e:f0:96:e8:8d:5d:
                    5f:e1:7c:33:5d:ab:04:de:c0:90:c5:dc:9e:b4:d4:
                    dd:d9:f6:71:e0:34:e7:52:fe:34:56:1a:15:3f:61:
                    6d:79:35:b6:e6:fe:c8:37:8a:22:20:82:cd:7b:1e:
                    18:d7:0c:82:2d:1d:83:0d:60:1e:45:54:5a:51:1b:
                    26:dc:53:62:63:76:55:dd:65:9a:ed:dc:0d:41:5d:
                    b4:ae:b8:a5:97:89:92:41:96:1b:80:e2:85:b0:24:
                    ae:40:d3:20:69:a5:f1:83:89:35:4b:97:f1:1d:d7:
                    d9:98:c9:67:57:9f:07:bb:48:60:df:fb:c2:1e:c1:
                    8d:58:bf:a9:12:1a:1f:37:2f:94:28:9b:87:c0:5c:
                    4c:8f:88:c8:13:a2:0d:4e:cc:dc:a6:8a:d1:44:39:
                    3b:d9:a5:8c:f6:c2:14:fe:8d:be:98:31:8f:48:5a:
                    16:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:63:2C:7C:BB:1E:0B:CC:68:9E:33:5C:20:4C:F2:A7:9E:13:4A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8b:ed:03:d1:b7:40:c4:ad:1f:50:62:f9:83:b7:42:17:ad:
         b9:9d:c0:eb:f3:4d:63:bd:92:23:97:51:2d:dd:82:66:17:d2:
         36:b1:13:3e:2f:e9:00:82:6b:3c:3e:10:41:e5:06:93:9c:83:
         17:6c:03:e0:42:4a:2b:45:03:4c:a6:08:c5:51:8e:f4:98:89:
         b7:cf:40:70:1f:6a:4c:54:e1:69:f2:e7:ff:dd:01:f3:42:1e:
         14:d3:97:2a:e3:34:ad:fb:e9:02:d1:8c:69:c6:a5:69:23:b2:
         ef:96:fb:b2:b0:5f:53:fa:d3:34:c1:58:a2:d7:fd:e8:fb:22:
         a3:7b:10:e4:52:a4:6c:8f:15:db:a5:44:88:f9:b7:b1:a7:49:
         d8:a1:0f:18:05:06:1d:da:5a:3e:e6:5b:aa:08:40:f7:00:e0:
         12:5e:bb:8e:3a:b6:4c:19:ec:ae:14:37:d0:37:f8:fe:c9:8b:
         fc:b8:26:ab:cb:4a:02:36:ef:2a:02:1c:98:92:38:c6:ca:65:
         e3:d4:0d:07:2c:93:20:ee:52:e8:f7:5f:7a:35:b7:41:17:6a:
         46:e9:55:71:3b:4f:a6:a2:fb:d8:38:c4:07:d1:b3:f1:48:c8:
         88:2e:b5:4f:cf:23:c8:8f:75:ea:1c:be:7b:e6:25:97:43:1f:
         6a:2d:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:53 2025 by rpki-client