Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa
File:                     ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa (raw, json)
Hash identifier:          U6BUOfGya806sVVo5YWkpfLv0Zaw77pJerSt/CmijdY=
Subject key identifier:   1E:E6:BA:2F:DD:0F:F3:C5:1D:7E:40:96:35:AC:65:C4:A5:28:1D:1E
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584B583C8991B45BDD6E3D7FF780
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     11273
IP address blocks:        208.72.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:89:91:b4:5b:dd:6e:3d:7f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=e827488c-51fd-4b74-8643-b144a9820239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:8a:9e:21:d3:e0:bb:d4:22:a5:2a:ba:9b:
                    f6:26:5f:df:b7:4f:ec:94:d7:33:d4:e6:bc:cf:a7:
                    6b:10:ea:f3:2c:ca:27:a6:4d:b8:19:6c:26:cd:18:
                    40:49:e3:02:6d:32:9e:92:3b:ea:16:00:96:f5:77:
                    32:00:b5:49:ed:94:15:df:20:43:6c:54:03:83:83:
                    4b:49:04:42:de:05:3d:f4:fa:6c:e2:20:4a:36:cf:
                    f0:86:bf:4e:ce:a8:73:f3:12:74:3a:12:96:1d:e0:
                    88:7c:95:fa:e0:76:e1:88:7f:a6:83:43:d9:e4:af:
                    a3:16:7b:2f:17:92:bb:27:b1:20:93:2f:d2:2a:56:
                    d9:c4:10:f1:24:8f:7f:97:a1:25:7e:ff:ac:b3:b5:
                    e8:4b:94:55:f4:81:fb:26:c2:94:03:45:36:7b:20:
                    d0:11:44:f2:e3:fb:d2:d6:9f:ce:5a:1c:b6:6d:15:
                    30:00:17:e1:16:47:b6:4b:1c:df:0e:13:61:56:a9:
                    60:45:99:f2:85:25:8f:df:24:35:a0:aa:91:0f:a0:
                    62:f8:81:81:9a:95:98:37:01:2d:7e:0f:4b:0a:1b:
                    91:61:3b:4a:95:f8:0d:01:8e:50:de:f9:b8:3a:4c:
                    6e:f7:1a:48:f0:3e:13:76:a7:42:b3:c5:6d:fa:8d:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:BA:2F:DD:0F:F3:C5:1D:7E:40:96:35:AC:65:C4:A5:28:1D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:64:70:d2:22:e4:37:cf:db:60:af:92:56:ea:3f:3b:0d:
         57:28:72:b1:25:ba:59:35:66:61:c4:27:12:b6:59:3a:14:ff:
         02:02:e0:ae:25:40:df:b5:85:87:6d:40:0f:c8:9b:8d:5c:28:
         fb:1e:bb:f4:12:29:4b:5f:0b:a4:ce:2a:66:f7:df:9f:ca:1f:
         d4:01:18:4c:8a:69:53:59:05:ab:80:79:7e:d0:56:7a:49:cf:
         98:2f:09:13:a6:a0:9e:70:56:af:f0:38:7c:be:4c:42:f4:94:
         5c:36:9b:53:6b:be:0a:ca:df:96:bd:f4:e7:f5:7b:a7:c3:ca:
         a8:07:28:1c:3f:6f:d1:f1:81:1c:2e:fd:51:6c:84:9a:45:55:
         ae:88:5f:9e:a3:95:2d:65:10:7f:cc:2c:8c:e9:03:bc:b8:3a:
         3d:18:ba:1c:dc:b7:3f:55:ab:25:44:80:59:b1:6c:94:ae:1b:
         32:cf:34:f9:b8:7c:09:d1:4b:d4:3a:6b:1c:7e:52:6c:8e:5e:
         c9:bc:ba:d9:6b:a2:af:7c:76:92:24:58:11:c7:ef:7a:d8:80:
         9b:34:99:3b:5c:7d:69:c6:d4:fe:df:b1:2b:68:fd:bf:7f:80:
         67:02:c0:f6:53:be:a1:6b:21:97:ee:78:21:e7:2a:e3:6e:c8:
         56:f1:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:55:00 2025 by rpki-client