Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/22e88d42-4e79-3a31-8c43-10db6048d83b.roa
File:                     22e88d42-4e79-3a31-8c43-10db6048d83b.roa (raw, json)
Hash identifier:          1NYsuFAZ0RS4ESUejOz6IddMo9rVS50xhUsNS3qpV8w=
Subject key identifier:   CE:7D:FC:3D:7D:BF:19:7E:5C:72:0E:FB:E8:1E:DB:CA:D0:A0:25:76
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E0C1ED886EC2E55C7BAAED880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/22e88d42-4e79-3a31-8c43-10db6048d83b.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     64267
IP address blocks:        152.44.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d8:86:ec:2e:55:c7:ba:ae:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=7ed2d97a-550e-4c44-bce7-b9b1fdccba7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:de:f1:aa:cd:4e:69:87:25:7c:9d:e2:0c:
                    ef:fc:29:1a:15:e0:8d:2c:84:8d:ee:02:11:f5:11:
                    23:17:b1:94:a3:66:a8:97:00:5e:c2:3f:fb:fb:80:
                    8f:33:0c:77:ca:c3:7a:c6:52:bb:b3:d2:33:46:3d:
                    27:74:02:93:a6:a5:9b:6f:b4:c8:df:8e:0d:f2:a7:
                    b6:b3:91:fe:38:cf:dd:4c:32:0f:f7:d5:55:ab:2a:
                    f7:00:ea:dd:db:8d:cf:31:fd:76:72:af:86:7e:df:
                    d3:de:40:03:79:e4:80:aa:8d:b1:bf:6d:1d:cb:da:
                    83:ec:8d:e5:d0:0f:71:07:7e:d6:90:20:7f:bc:c2:
                    1f:18:b6:f4:49:26:fc:6d:e8:e2:10:5e:53:76:04:
                    52:56:82:72:8d:74:66:5d:b7:39:c8:56:b7:d2:e3:
                    b1:3a:38:67:87:5f:83:7b:44:7c:b0:6f:85:39:1f:
                    e9:24:90:c5:07:64:4a:fb:c4:40:8b:6c:a9:05:e3:
                    f0:25:55:05:04:a6:73:05:50:16:0f:66:4e:66:e6:
                    e8:85:69:48:04:b1:48:50:c9:79:2e:df:21:01:12:
                    b3:09:4b:3e:97:d4:fa:8f:4f:37:c3:e3:69:bd:81:
                    dc:ff:59:07:8e:75:1e:81:27:bb:cb:e6:92:12:1e:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7D:FC:3D:7D:BF:19:7E:5C:72:0E:FB:E8:1E:DB:CA:D0:A0:25:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/22e88d42-4e79-3a31-8c43-10db6048d83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:b5:e3:9a:b4:9f:4b:22:e3:a3:9a:a7:6a:28:8f:7b:cd:9e:
         d1:c0:e3:9b:0f:69:5e:82:9b:33:38:69:96:70:62:4c:4b:7c:
         ae:06:55:97:bd:cf:7a:79:f3:34:18:6e:77:17:7c:d1:0c:65:
         e6:02:ab:cc:f9:7a:bb:a7:14:17:ce:cd:cc:02:a0:2e:c5:64:
         ee:a1:a0:ca:b2:8d:18:c2:3c:e2:7e:50:25:99:f3:6d:aa:cb:
         84:24:db:7a:40:6c:0d:55:22:3f:27:24:86:79:7b:0a:ba:fb:
         7e:2a:2e:19:b7:71:79:a6:55:14:ad:4e:57:6b:55:e3:83:0a:
         67:b3:82:35:7f:1f:cd:30:05:a8:c6:6c:22:74:60:9f:56:ab:
         b7:8f:b5:92:30:62:12:0f:c2:db:5a:b6:92:b1:00:d4:e4:6d:
         a7:c7:a9:e5:63:4f:80:96:83:7e:4e:9a:d6:93:29:7a:48:e3:
         08:47:d6:a1:e8:d9:98:ef:31:f8:5d:c1:97:a1:25:e9:63:c1:
         b6:02:f6:a6:6d:89:fb:e3:0b:2c:cf:f1:f2:56:21:0a:99:c7:
         fb:bd:c8:41:5d:77:69:9b:a6:97:e4:41:f7:c7:02:a8:02:06:
         62:35:01:60:fc:98:a6:49:50:76:fa:39:88:86:d4:34:ec:16:
         48:b7:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:22:56 2026 by rpki-client