Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa
File:                     481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa (raw, json)
Hash identifier:          IqIEPEtk+3NG5B47Nu3IEgXjZkqEcVZWfCi7/fiss60=
Subject key identifier:   64:A5:D7:9A:3A:AE:32:44:B8:DA:1A:C6:3D:F0:14:5D:49:DC:54:98
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584A8D8EC4E841960EA0518AD380
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa
Signing time:             Thu 17 Jul 2025 22:37:24 +0000
ROA not before:           Thu 17 Jul 2025 22:37:24 +0000
ROA not after:            Wed 15 Oct 2025 22:37:24 +0000
asID:                     5065
IP address blocks:        216.150.72.0/24 maxlen: 24
                          216.150.74.0/24 maxlen: 24
                          216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.79.0/24 maxlen: 24
                          216.150.80.0/24 maxlen: 24
                          216.150.81.0/24 maxlen: 24
                          216.150.82.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.86.0/24 maxlen: 24
                          216.150.87.0/24 maxlen: 24
                          216.150.88.0/24 maxlen: 24
                          216.150.89.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.92.0/24 maxlen: 24
                          216.150.93.0/24 maxlen: 24
                          216.150.94.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:8e:c4:e8:41:96:0e:a0:51:8a:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Jul 17 22:37:24 2025 GMT
            Not After : Oct 15 22:37:24 2025 GMT
        Subject: CN=15af5ac3-87a2-46f9-9b65-4181dc8cbb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:5b:a3:a7:cd:3a:8f:ee:a2:95:78:27:b0:
                    ae:19:11:65:15:fa:8a:0e:77:0c:10:4a:9e:c2:97:
                    c7:5d:86:e1:67:40:66:b5:6e:2b:66:48:b1:95:77:
                    7a:4a:7d:d3:7b:b5:dc:6b:c6:1a:93:0a:3c:d9:f1:
                    d5:a2:b9:cc:62:c4:56:c5:d7:7d:11:97:52:be:ea:
                    f2:21:a9:1d:bb:2f:ee:e3:e3:cf:8c:5b:69:7d:9b:
                    6e:33:98:ff:03:e1:a4:5a:4f:66:df:da:12:6c:af:
                    5f:98:30:91:75:07:f6:87:02:4f:01:58:cd:58:80:
                    cb:c1:88:ec:f5:5d:9b:d5:5e:44:82:d8:ab:f1:71:
                    28:9a:3c:df:97:b0:6b:82:5c:75:c5:8a:44:af:f5:
                    4b:15:aa:f6:b1:77:24:0c:89:7c:f0:78:0b:37:2f:
                    4f:ad:d9:d9:e9:5a:c2:eb:59:1f:ef:08:cb:b9:01:
                    b9:1a:7e:29:04:ba:13:fd:07:4e:36:c3:36:ba:b3:
                    08:13:86:b1:de:9d:05:d4:44:65:7a:3f:36:c0:38:
                    51:1b:1f:fc:c2:a5:f2:39:49:52:65:ca:15:09:71:
                    88:37:21:7a:4c:c3:95:bb:f2:22:a0:60:90:0f:2d:
                    43:35:81:fe:1d:80:30:44:86:c3:2a:7d:60:30:82:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:D7:9A:3A:AE:32:44:B8:DA:1A:C6:3D:F0:14:5D:49:DC:54:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/481045a7-f2f9-3e3a-ad00-8cd6aab6ed1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.72.0/24
                  216.150.74.0/23
                  216.150.77.0-216.150.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:e8:0f:9b:9d:1f:cd:b8:17:f9:db:c5:14:f7:12:9c:d8:
         bb:6c:36:c1:b6:b3:6c:3a:ef:c5:94:a5:96:c0:d7:0c:0a:42:
         c3:ba:d0:39:2e:7c:b2:bc:0b:ad:7a:a2:fe:f9:24:7e:18:66:
         84:18:e8:2d:1c:b9:f9:1e:9a:2f:d0:2f:e9:55:1b:0f:64:2b:
         a5:7a:07:cb:75:3b:b0:93:6e:38:2f:43:59:1d:7c:c4:92:f3:
         18:da:c7:16:da:aa:d2:dd:f4:62:54:ed:5a:42:4c:58:78:4e:
         66:9c:5b:3a:83:89:26:78:05:10:06:d1:35:d6:10:5f:2e:04:
         1a:c0:17:43:9e:11:22:07:d3:29:4f:4f:c8:4a:ca:f6:ac:e5:
         ae:d5:47:3e:bc:d3:31:d5:3e:6d:61:e4:52:91:11:b9:d5:4f:
         9c:6c:c2:3f:d7:f2:0b:43:9d:da:88:07:5b:8b:4c:32:1b:51:
         e5:1f:39:87:f7:5f:85:14:fa:ea:c8:78:f0:3d:af:e1:4f:fe:
         fb:49:64:4f:19:54:aa:9c:b3:7d:1c:93:bf:c3:b0:ce:5e:81:
         6d:8a:fc:1c:e5:8b:ca:48:2f:ff:54:14:8c:98:5e:b5:b2:df:
         a9:a6:26:c1:83:cd:83:4d:56:02:30:4b:36:bd:ac:55:1f:a6:
         0e:72:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:46 2025 by rpki-client