Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa
File:                     28769cd4-65bd-3560-9039-398d97a508a2.roa (raw, json)
Hash identifier:          SxQKvzj6wGYG3XyfJnmao0x4gkX9Xv/64RL8SX1/190=
Subject key identifier:   3B:7D:46:BC:26:04:91:AB:90:52:11:AF:F1:70:2D:03:80:3B:2B:83
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B6BC758D6960A021798B25280
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     271
IP address blocks:        206.12.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:58:d6:96:0a:02:17:98:b2:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=84192fed-ab4c-4c3a-830a-455f6e226b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:38:24:37:7e:6d:87:51:f7:c3:b0:e7:30:
                    9e:73:01:8c:67:6b:47:3b:71:a6:77:c5:1a:58:9c:
                    94:af:ba:64:c3:7d:80:c6:94:bf:b6:20:f0:83:f7:
                    5b:04:9c:cf:3d:56:12:79:21:53:a8:8f:20:dd:f9:
                    ae:ab:68:31:14:12:21:a9:93:9b:2c:53:2e:98:52:
                    06:02:1d:b1:5d:29:60:ba:28:b7:f0:66:e7:b0:00:
                    55:71:3c:c6:f5:b3:e6:d5:fa:a8:22:55:e0:e0:7f:
                    7d:4f:c5:ea:85:8d:2f:b0:89:4e:f7:3f:1f:6c:c4:
                    52:05:dd:eb:aa:2e:60:a7:77:f6:e0:24:96:20:01:
                    54:2e:80:eb:77:9f:bb:0b:b7:71:7b:44:b0:69:6f:
                    66:1e:26:67:37:b9:15:11:30:14:85:c8:22:07:f2:
                    9a:5d:ef:e5:7d:38:74:43:3a:8d:74:95:02:ce:42:
                    cb:6c:f3:70:fe:78:c9:c8:ea:c9:ce:ed:96:2c:e5:
                    ef:9e:4a:bc:bc:e9:06:82:8e:08:56:d1:c7:8d:66:
                    d7:bb:1c:31:a5:30:21:15:c0:37:e4:92:dd:f5:9d:
                    ca:f0:80:2e:98:ae:27:27:a7:8a:0e:88:eb:2d:3b:
                    c3:34:f1:d7:91:c5:8e:16:4a:37:64:8e:58:ce:72:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7D:46:BC:26:04:91:AB:90:52:11:AF:F1:70:2D:03:80:3B:2B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e2:26:73:fc:e4:7d:e9:f9:d4:25:43:7e:5d:48:bd:00:33:
         f2:c7:fa:f4:cb:4d:25:3a:b0:17:62:67:a9:a8:47:c1:53:80:
         1d:84:c5:29:01:4d:b8:55:1e:b6:3b:9f:de:5e:37:3b:22:35:
         76:8e:21:5b:5e:39:08:7c:e2:bf:8e:74:dc:3f:74:ef:79:c6:
         b0:86:0e:5a:1b:99:72:4b:c1:af:4f:bf:4b:88:6a:65:bd:61:
         97:df:a2:44:47:8c:ef:2b:eb:86:e1:85:44:9e:68:3d:8c:41:
         4f:74:c8:a8:5a:d4:2a:af:1c:a7:d5:a0:35:42:6e:29:6f:a5:
         8f:38:ff:fd:8f:b2:99:12:0d:8b:d9:4c:76:cf:1a:ec:94:2f:
         81:8f:24:56:0d:7f:22:c8:d5:62:96:d0:34:b4:0d:2e:c4:e7:
         56:e7:9c:17:0d:0d:61:64:b7:a9:c7:ae:3d:84:5c:36:48:91:
         00:45:05:e4:c0:e7:33:ff:ec:8b:1e:42:c6:3c:25:10:be:42:
         20:13:96:96:e3:0b:be:00:db:73:7d:fd:a3:a4:0f:46:f8:e7:
         8e:cd:84:ce:06:0c:3c:64:68:67:97:b0:a2:0d:0d:b8:2f:56:
         43:bd:b7:e2:a9:f6:52:e8:b9:51:e3:8c:68:c9:24:ae:c4:e7:
         e7:b3:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:30 2025 by rpki-client