Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
File:                     57dcb7b6-7978-3d38-9206-63b13004d328.roa (raw, json)
Hash identifier:          EXg21RB42iUcW+1ToLTKRpYENxoTSEZYV5Ck+tgJalQ=
Subject key identifier:   7A:0C:E1:23:2D:49:44:55:45:23:00:8A:26:20:5F:CF:0A:11:CC:FF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B196C0B1ADC73C0033B1F2680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22516
IP address blocks:        209.163.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:0b:1a:dc:73:c0:03:3b:1f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=30d7ac49-7100-48a3-bdad-ccf27ad78084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:62:1d:25:82:5f:a0:d3:dd:9d:1d:35:3b:
                    5c:25:60:91:f7:ea:55:4d:70:36:85:5d:b8:ab:c8:
                    36:8b:01:37:bf:46:1a:3d:4e:56:a2:46:d5:72:a0:
                    e9:2b:8f:85:fd:85:17:fd:9b:30:d3:14:bc:4a:8b:
                    c1:17:7d:25:80:f4:67:a7:a2:ee:44:b4:3c:27:ee:
                    09:76:82:fb:3c:15:3c:5d:cd:61:60:08:66:48:b9:
                    a5:11:ea:5a:d0:3c:a5:dd:53:ff:9f:e5:2e:ec:2a:
                    3b:1c:22:77:bc:e8:10:fb:f8:14:66:69:e1:ea:97:
                    ec:6b:30:20:21:87:a4:25:d4:28:2b:99:37:01:21:
                    00:bd:83:2c:b2:a5:2c:fb:9b:0e:70:14:59:96:45:
                    ae:a3:17:a5:10:07:23:ce:6a:b1:50:87:3c:31:1d:
                    30:0d:77:c8:cb:9f:c2:1e:be:0e:bb:43:67:c0:88:
                    a5:b6:27:aa:ee:de:8c:8f:fe:1c:0a:fd:ec:0e:a4:
                    c7:a0:88:c1:f1:a9:47:69:31:c7:b2:60:5f:a0:4f:
                    12:1e:a8:00:1f:65:7d:96:62:8d:da:d4:dc:84:80:
                    fb:26:c8:8c:09:0c:90:be:38:77:69:4a:55:44:e9:
                    f3:91:e7:62:21:65:88:63:8b:ca:6e:1a:a0:c7:7d:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:E1:23:2D:49:44:55:45:23:00:8A:26:20:5F:CF:0A:11:CC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57dcb7b6-7978-3d38-9206-63b13004d328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:01:8e:07:bb:a5:6f:0c:64:dc:5b:ba:59:fe:82:84:34:79:
         93:28:65:04:90:c1:ae:c4:0c:8e:58:68:e2:0c:35:53:a5:3b:
         d2:06:7a:0d:66:89:e0:aa:d0:60:1e:d1:76:ec:83:07:7a:65:
         1d:ca:c8:e3:8e:a8:14:d4:77:e6:41:97:6b:ed:1f:d0:f1:11:
         a1:14:8c:5b:39:48:2e:b8:4d:f0:d6:54:96:20:24:7c:ee:b6:
         64:35:6c:9b:7d:50:e4:ef:22:b5:53:fd:ec:d9:14:c3:13:a8:
         c9:3f:34:96:49:b1:ef:6f:18:56:e4:a4:35:64:e8:97:18:de:
         3e:3d:89:79:d2:f4:3d:3a:79:e5:2d:85:22:a1:04:48:84:ac:
         df:78:f2:d3:90:be:d6:49:4c:18:4c:aa:3f:fe:e2:fb:1d:e9:
         5c:d2:36:00:d4:af:bf:fd:a9:e0:46:37:48:14:a7:0a:2d:22:
         84:df:4a:0f:88:87:cd:47:a4:e5:b2:36:9f:81:c5:a2:75:70:
         f4:b5:69:17:8c:62:df:5c:a8:16:3a:22:22:bc:fc:45:41:73:
         ef:fa:c8:9a:2a:e4:b5:1c:7f:33:c6:41:dd:f3:78:3f:47:a1:
         0a:9f:fe:1a:74:fb:47:35:ee:2d:5f:70:2a:5b:4a:89:24:68:
         ba:46:9a:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAsa3HPAAzsfJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MzBkN2FjNDktNzEwMC00OGEzLWJkYWQtY2NmMjdhZDc4MDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJtiHSWCX6DT3Z0dNTtcJWCR9+pVTXA2hV24
q8g2iwE3v0YaPU5WokbVcqDpK4+F/YUX/Zsw0xS8SovBF30lgPRnp6LuRLQ8J+4J
doL7PBU8Xc1hYAhmSLmlEepa0Dyl3VP/n+Uu7Co7HCJ3vOgQ+/gUZmnh6pfsazAg
IYekJdQoK5k3ASEAvYMssqUs+5sOcBRZlkWuoxelEAcjzmqxUIc8MR0wDXfIy5/C
Hr4Ou0NnwIiltieq7t6Mj/4cCv3sDqTHoIjB8alHaTHHsmBfoE8SHqgAH2V9lmKN
2tTchID7JsiMCQyQvjh3aUpVROnzkediIWWIY4vKbhqgx32F6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoM4SMtSURVRSMAiiYgX88KEcz/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTdkY2I3YjYtNzk3OC0z
ZDM4LTkyMDYtNjNiMTMwMDRkMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEBjge7pW8MZNxbuln+goQ0eZMoZQSQwa7EDI5YaOIMNVOlO9IGeg1m
ieCq0GAe0Xbsgwd6ZR3KyOOOqBTUd+ZBl2vtH9DxEaEUjFs5SC64TfDWVJYgJHzu
tmQ1bJt9UOTvIrVT/ezZFMMTqMk/NJZJse9vGFbkpDVk6JcY3j49iXnS9D06eeUt
hSKhBEiErN948tOQvtZJTBhMqj/+4vsd6VzSNgDUr7/9qeBGN0gUpwotIoTfSg+I
h81HpOWyNp+BxaJ1cPS1aReMYt9cqBY6IiK8/EVBc+/6yJoq5LUcfzPGQd3zeD9H
oQqf/hp0+0c17i1fcCpbSokkaLpGmuk=
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:22:03 2025 by rpki-client