Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa
File:                     ea236730-7d41-3930-987a-025491e99693.roa (raw, json)
Hash identifier:          VWyYI5g81S1rGq0Sj/mKRd28KnkSe/j9T2mk/2G3f/c=
Subject key identifier:   4C:6D:22:A1:B9:5C:15:CF:EC:E8:BC:D4:0A:62:49:48:61:FF:F4:45
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A96369618C78E892A50A89F40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     397630
IP address blocks:        158.62.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:96:18:c7:8e:89:2a:50:a8:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=ab2ef8da-212e-4210-b2b3-67fff99469be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:37:97:10:26:3f:71:e6:14:bc:8c:cf:35:
                    4b:7c:97:19:20:fe:90:68:51:fb:68:fd:59:2d:4b:
                    6a:90:b3:8d:ba:95:96:54:03:c5:c1:bb:a1:65:6e:
                    99:d0:74:bb:0d:a0:ea:cd:40:0d:40:e4:07:47:47:
                    e7:88:d1:56:ea:67:5e:17:9a:5f:2d:48:6f:13:aa:
                    ef:4d:0d:3a:ba:fa:21:31:c2:3c:d5:2b:d5:b8:ff:
                    7c:0b:47:51:eb:5a:fb:a4:e3:53:37:29:6f:f2:ee:
                    87:e9:b4:02:08:b5:c5:ab:a9:61:0d:d0:66:96:98:
                    c3:4d:d6:4e:40:22:e0:7f:2e:8a:f5:9b:fe:aa:cb:
                    75:0f:d9:e1:55:49:26:d9:e8:24:8e:aa:19:8c:ce:
                    29:5c:28:06:45:01:01:47:70:e0:3c:30:5f:45:fe:
                    02:6f:0c:69:e6:d5:1b:16:3d:c9:c0:17:80:ff:d1:
                    1d:f7:73:16:fc:48:d8:e1:3d:e7:e4:64:4a:59:4e:
                    95:fc:8d:80:65:46:f0:72:ec:80:f6:09:74:ac:5e:
                    0c:f8:2c:f4:d7:48:7a:ea:3c:a3:1b:07:df:0a:04:
                    cc:9f:ce:7a:98:35:a2:16:af:c2:18:82:8c:28:8a:
                    ee:98:04:a8:b3:41:98:cd:62:99:40:e4:7b:a7:80:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6D:22:A1:B9:5C:15:CF:EC:E8:BC:D4:0A:62:49:48:61:FF:F4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea236730-7d41-3930-987a-025491e99693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:89:1e:98:5f:5e:c8:1e:28:83:5f:ae:61:50:39:de:37:a3:
         90:3c:4c:0d:e2:46:a2:0b:a3:6c:fd:64:1e:6d:84:fb:e1:1d:
         ba:e1:12:ea:25:09:10:0c:6d:52:d4:3f:6a:86:ca:19:75:66:
         f5:16:6a:df:ed:a2:b5:0c:b9:23:d6:3e:1f:dd:63:99:48:c8:
         72:69:35:b3:21:6f:3b:47:fc:37:ca:71:9b:fa:54:41:ea:7d:
         45:1d:61:3c:a8:de:6b:06:a3:13:7a:c2:21:8c:4a:f0:c6:af:
         bf:bd:5e:ab:98:ac:4a:8d:e6:1b:cb:93:15:8f:c2:02:df:69:
         91:d7:3d:34:3a:b1:07:5d:d7:3b:0f:a5:4c:0e:7f:aa:36:54:
         d5:47:d5:29:ca:4b:c3:76:91:e7:17:c3:43:e1:1e:d6:ec:88:
         de:a2:fe:53:36:62:08:66:3f:63:6b:13:37:29:0e:ff:ce:c9:
         9c:3d:a4:4b:07:72:38:72:93:02:72:10:7a:cc:1b:a8:66:fa:
         49:7b:a4:73:fc:a6:b1:d7:74:5c:65:21:26:38:da:de:c2:d2:
         e0:16:08:80:13:6c:36:1f:2b:0d:12:52:a8:5e:96:59:97:9a:
         de:7b:e5:cd:15:37:cf:1e:d2:cc:7e:c0:4e:a2:3e:d3:8a:f0:
         e2:8b:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:23:41 2025 by rpki-client