Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1ca7c5cf-a882-3c09-9ac3-419c0fb66e0c.roa
File:                     1ca7c5cf-a882-3c09-9ac3-419c0fb66e0c.roa (raw, json)
Hash identifier:          6HbEHqW/YgwGVS9VaqvjTqcYl5JT3pFMXqKYJBODIGI=
Subject key identifier:   DB:23:8A:2A:9A:79:4D:BC:12:55:91:62:FB:C0:D8:1A:5F:02:FD:2C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B196C0A4AA9D9BF97ECCB8880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1ca7c5cf-a882-3c09-9ac3-419c0fb66e0c.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22516
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:0a:4a:a9:d9:bf:97:ec:cb:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=7df3be64-c8a8-48cb-9242-2a7ed205a5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:fd:38:41:7b:91:1a:70:5e:86:76:fd:fc:
                    31:05:fb:fe:8e:48:df:11:a9:92:a5:f8:01:fb:d2:
                    10:ba:b8:24:87:ad:6a:5b:2b:a8:84:15:3b:17:4f:
                    ed:6f:1b:55:94:37:65:34:55:dc:51:7d:69:08:51:
                    2d:e6:04:d0:b8:96:1b:00:2e:fc:c2:d4:f9:4f:56:
                    9f:cf:cc:7b:d7:3f:aa:cb:c3:78:c4:94:63:43:e2:
                    7f:51:40:9c:cc:69:c6:3e:d2:08:a1:3a:dd:b9:4e:
                    53:06:aa:7a:c1:25:e5:29:1d:48:51:99:ae:7e:26:
                    fe:2b:ec:f7:3d:8a:9f:35:ba:d6:e8:b1:a9:52:59:
                    e2:ee:a7:b6:af:5f:58:69:6b:9e:73:2f:af:cb:e9:
                    d9:bf:6e:17:8b:18:c6:ba:6f:36:0d:67:a3:24:40:
                    d7:20:56:9c:d0:7d:12:bb:59:2c:0c:90:f9:73:65:
                    e3:84:6e:96:a5:7e:08:4b:e7:a0:f2:16:e8:28:10:
                    25:1c:f8:2a:f1:6e:5d:9c:d9:61:2a:6d:e3:b1:e1:
                    9b:f6:c0:56:ac:a3:e8:f7:11:84:ca:60:74:a6:27:
                    70:8c:7f:2f:f7:10:d1:78:8d:96:b0:c9:b6:69:e9:
                    28:e6:75:8d:9a:06:12:f9:cc:16:87:bd:86:00:b1:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:8A:2A:9A:79:4D:BC:12:55:91:62:FB:C0:D8:1A:5F:02:FD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1ca7c5cf-a882-3c09-9ac3-419c0fb66e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:13:43:60:fc:78:5f:f3:05:e1:eb:8f:67:87:87:6a:25:3e:
         05:55:8a:7f:8c:ab:8b:c4:82:32:61:09:0a:d5:20:99:e4:fb:
         4c:8a:69:24:20:bf:c5:0a:42:96:fb:3b:ca:51:6a:af:ea:3f:
         a2:9f:34:78:c3:42:a8:94:0f:c6:70:43:0e:11:a4:ae:b8:d1:
         4a:aa:89:ab:aa:d3:e6:a5:93:26:64:d3:f5:a0:c3:95:c5:ae:
         6a:fa:a2:e3:31:59:c8:67:37:30:87:62:7a:64:d0:77:52:1d:
         a5:64:a1:44:ab:47:13:86:ef:b5:3a:14:31:9e:f1:cb:6c:4a:
         6d:77:99:42:10:6f:48:05:52:f9:8e:cd:fc:3e:13:c2:2a:67:
         1a:68:b7:34:88:12:a7:21:1a:15:d8:32:be:98:22:ed:7f:d9:
         10:7d:78:77:24:93:e9:25:b1:ba:36:f2:65:00:1e:a9:59:b6:
         2a:87:dc:f6:49:5d:70:dc:6a:e4:54:3d:b7:7b:46:61:5f:28:
         3b:ce:88:e0:10:15:a1:de:f8:a1:2b:b8:fb:a9:2c:ec:f5:7e:
         c7:16:c5:16:3b:51:47:e7:25:f9:b8:7d:b6:df:f1:fc:0b:c4:
         14:9f:49:83:d0:69:1b:cb:be:1f:9f:72:e2:aa:87:df:75:bc:
         ab:20:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:17:34 2025 by rpki-client