Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b9bfda-240c-3143-b940-399151ccc280.roa
File:                     28b9bfda-240c-3143-b940-399151ccc280.roa (raw, json)
Hash identifier:          TMYBzfx2Ngoo8ISjImimwayv2wuRWWuTaPGEisBC844=
Subject key identifier:   88:75:CB:FE:5F:C0:AA:03:C5:09:4E:95:8A:6A:33:2D:9F:B4:03:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D75BFB3263DBE3FD8804
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b9bfda-240c-3143-b940-399151ccc280.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        162.83.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d7:5b:fb:32:63:db:e3:fd:88:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=054c10bc-6183-4e02-963a-57f7b1cb7fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:2c:f0:04:60:ab:f9:1a:9f:e0:44:fe:cc:
                    ff:04:c5:9b:79:cc:a2:6d:11:41:de:80:2a:95:75:
                    07:a3:57:09:78:1d:3e:00:39:50:bd:a3:50:5c:d7:
                    e4:0b:72:f4:45:3c:4c:3c:0d:02:76:7c:f5:8c:36:
                    62:ac:20:39:dd:a8:1c:d8:05:4c:83:5c:63:57:b5:
                    07:36:8d:54:db:b7:ab:90:60:96:22:b3:cb:c2:bf:
                    5b:1b:33:93:bb:04:c0:b6:29:b1:0d:19:e3:df:22:
                    3f:8b:85:81:65:94:9d:9f:0b:69:f9:44:79:32:63:
                    c7:bf:41:58:53:53:25:6c:cb:1f:3c:f9:63:95:1a:
                    a4:a3:cc:a8:05:4f:29:27:71:46:68:f1:f3:fd:2e:
                    95:9b:cf:ea:ab:76:70:e9:e1:80:21:24:85:fc:83:
                    2c:3a:24:0e:57:cc:82:6c:84:c6:7c:a9:44:6b:0e:
                    46:f9:25:51:f4:b0:57:b2:13:bf:e5:da:8a:6f:91:
                    42:2f:73:a6:bc:77:97:57:ef:70:e0:ac:3f:12:6e:
                    48:6f:4a:cf:1c:87:71:bc:1a:ec:7a:56:e7:7b:52:
                    7d:27:87:6e:0b:ff:e4:62:38:77:8e:87:7d:01:af:
                    f3:78:3c:89:92:47:a2:60:6e:5c:12:b8:fd:13:0e:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:75:CB:FE:5F:C0:AA:03:C5:09:4E:95:8A:6A:33:2D:9F:B4:03:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b9bfda-240c-3143-b940-399151ccc280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.83.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:d3:17:2f:a8:ca:0f:7a:fc:30:05:07:8a:51:ee:71:e7:
         19:a3:0d:04:88:a7:3a:e4:e4:fb:8f:86:6c:35:0e:58:8f:24:
         8d:ff:84:36:91:5c:c8:83:88:f5:d8:06:54:4e:18:2a:93:b6:
         f7:51:8b:80:0c:25:d8:15:fc:50:d7:28:b0:b8:04:17:dd:c3:
         fc:2d:28:a2:ef:87:02:4c:34:38:31:81:36:ec:d7:6c:9c:f7:
         b1:0b:16:60:f5:63:a1:56:87:a0:d5:d1:e5:9f:8c:21:cf:40:
         f9:f1:e7:cc:5d:19:b8:fb:fb:f6:85:da:f0:cd:c2:d6:f8:54:
         9d:c9:73:b8:f5:35:45:43:e1:be:f8:d5:34:2c:37:4b:b3:42:
         aa:12:d0:ca:07:81:d1:ce:51:94:85:f5:1c:48:6a:a6:f4:cb:
         e7:a8:67:9d:37:6e:6d:78:04:84:32:e5:b9:f0:40:5a:7e:eb:
         3c:a9:18:35:00:21:ad:0d:44:69:d0:f2:f4:e4:b8:07:84:ef:
         65:41:ab:2e:56:75:c5:19:ab:75:32:bd:89:27:b7:97:34:b0:
         4d:e2:0e:f6:02:c0:40:aa:54:ea:79:00:ec:93:db:52:45:ac:
         a6:f6:4d:44:49:ee:19:d1:d3:8e:8b:32:ad:f8:e4:31:cb:9b:
         10:74:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:37 2025 by rpki-client