Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f17c2d6-685e-3a9e-ba56-10361ae84aff.roa
File:                     0f17c2d6-685e-3a9e-ba56-10361ae84aff.roa (raw, json)
Hash identifier:          p29gRKGQwz7/7g0IfKoBIuct38IFIsEdZiIBElgH5kQ=
Subject key identifier:   DC:B7:7D:9A:75:F9:66:48:A9:2E:47:5F:8E:06:69:51:D9:A3:05:12
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B047C15EE3EA2D640472D9D80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f17c2d6-685e-3a9e-ba56-10361ae84aff.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        67.216.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:15:ee:3e:a2:d6:40:47:2d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=6d69fb41-ca2f-4c11-b16b-b849f2437006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:7d:34:40:6f:4d:0b:f9:38:8d:6e:5f:10:
                    d5:ac:50:80:1d:1d:f3:50:fd:52:ac:85:89:1d:83:
                    88:cf:28:a4:b2:8d:5f:db:27:6d:6e:5a:d8:9f:1d:
                    68:9b:ba:65:29:fc:c2:60:fd:84:10:6a:f9:cc:21:
                    9c:11:e8:ae:0b:b0:96:55:06:5a:17:89:3d:3f:60:
                    d7:d8:6b:ff:ec:90:0e:b5:f3:b9:f3:87:ee:80:20:
                    92:8f:8b:58:52:13:38:a9:f3:67:87:2c:81:27:bd:
                    10:b0:62:4d:db:4a:c6:e5:8f:5a:7b:b8:2c:c3:a4:
                    b2:3b:31:b3:be:6e:7f:a8:eb:ce:ad:5d:38:fa:38:
                    f4:9e:00:4b:09:35:e9:d9:13:c1:b3:c8:b2:c1:26:
                    5a:66:7b:4b:61:79:8b:65:3d:1a:3c:d5:d2:de:c5:
                    a1:be:cf:ce:b8:3f:8f:25:39:31:8e:5c:fb:b9:58:
                    6c:8e:2e:8f:ae:11:a6:99:19:4f:0f:df:84:a9:c9:
                    04:fa:24:b4:47:1b:e5:5a:8e:d8:09:c9:76:75:f9:
                    9c:71:e3:cd:46:1d:f0:46:0f:90:a7:d3:74:1d:9b:
                    99:49:69:6c:03:02:a3:f2:4c:5c:aa:d4:58:bc:b1:
                    17:77:a5:d4:08:3c:2f:98:5e:1b:37:be:05:37:55:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:7D:9A:75:F9:66:48:A9:2E:47:5F:8E:06:69:51:D9:A3:05:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f17c2d6-685e-3a9e-ba56-10361ae84aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:16:ef:c4:d2:76:4a:b3:26:c3:c7:ab:df:06:c3:ac:6e:2e:
         33:ec:3e:94:eb:52:c0:0e:44:0c:7e:57:d1:4d:d4:db:ce:ef:
         49:28:a1:df:18:77:15:36:e6:0c:18:e8:c4:34:59:ab:64:b1:
         94:27:c2:da:ec:69:f9:71:b0:45:8f:2b:f2:3a:4d:33:5e:d4:
         02:c2:e5:cf:58:93:96:1c:0d:7b:2c:98:8b:51:32:71:52:fc:
         a0:6e:38:05:c0:07:ff:71:ce:ff:a8:67:57:92:e1:74:f4:14:
         e2:34:94:94:90:14:ca:3f:20:df:fa:c8:2a:34:af:96:1f:4b:
         81:33:1c:9f:1d:7c:83:98:79:76:cf:bd:e6:5c:60:8f:24:bb:
         cb:ca:1b:23:c1:c5:e8:08:9e:b5:bc:93:32:63:9c:4a:36:19:
         14:91:ee:a9:7f:cc:1a:3e:85:a2:f1:5b:d6:5c:dc:e9:ce:17:
         c2:fc:ab:77:e4:2b:f2:c3:12:a9:08:3d:e4:d1:5f:49:bc:97:
         3d:07:55:7c:33:01:6d:48:fe:53:1e:1a:fe:7c:45:f6:a8:91:
         29:bc:76:9a:08:01:4f:81:8c:aa:d9:7e:84:03:3f:a2:1c:e0:
         ff:dc:c5:cb:07:e8:e6:97:0c:87:75:91:ba:80:76:ce:4d:02:
         91:7f:c9:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBXuPqLWQEctnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NmQ2OWZiNDEtY2EyZi00YzExLWIxNmItYjg0OWYyNDM3MDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6V9NEBvTQv5OI1uXxDVrFCAHR3zUP1SrIWJ
HYOIzyikso1f2ydtblrYnx1om7plKfzCYP2EEGr5zCGcEeiuC7CWVQZaF4k9P2DX
2Gv/7JAOtfO584fugCCSj4tYUhM4qfNnhyyBJ70QsGJN20rG5Y9ae7gsw6SyOzGz
vm5/qOvOrV04+jj0ngBLCTXp2RPBs8iywSZaZntLYXmLZT0aPNXS3sWhvs/OuD+P
JTkxjlz7uVhsji6PrhGmmRlPD9+EqckE+iS0RxvlWo7YCcl2dfmccePNRh3wRg+Q
p9N0HZuZSWlsAwKj8kxcqtRYvLEXd6XUCDwvmF4bN74FN1WhrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNy3fZp1+WZIqS5HX44GaVHZowUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGYxN2MyZDYtNjg1ZS0z
YTllLWJhNTYtMTAzNjFhZTg0YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9jtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQW78TSdkqzJsPHq98Gw6xuLjPsPpTrUsAORAx+V9FN1NvO70kood8Y
dxU25gwY6MQ0WatksZQnwtrsaflxsEWPK/I6TTNe1ALC5c9Yk5YcDXssmItRMnFS
/KBuOAXAB/9xzv+oZ1eS4XT0FOI0lJSQFMo/IN/6yCo0r5YfS4EzHJ8dfIOYeXbP
veZcYI8ku8vKGyPBxegInrW8kzJjnEo2GRSR7ql/zBo+haLxW9Zc3OnOF8L8q3fk
K/LDEqkIPeTRX0m8lz0HVXwzAW1I/lMeGv58RfaokSm8dpoIAU+BjKrZfoQDP6Ic
4P/cxcsH6OaXDId1kbqAds5NApF/ycw=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:50 2025 by rpki-client