Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b5276353-d624-32a6-b6c8-a6ce57b41ec9.roa
File:                     b5276353-d624-32a6-b6c8-a6ce57b41ec9.roa (raw, json)
Hash identifier:          /lbJjLpfnDLFn4o6dzykYLKxNdGdQf1LpA7fTTpnEJ0=
Subject key identifier:   8A:B7:15:66:8F:B6:C6:43:37:DE:C7:E8:47:DC:82:B1:73:01:9C:9A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B196C0888B9C5EEE891103D40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b5276353-d624-32a6-b6c8-a6ce57b41ec9.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22516
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:08:88:b9:c5:ee:e8:91:10:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=4f3162e5-2a29-47f4-8d6f-38f1ec37232e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:bd:f8:f9:25:d0:db:e1:c3:e1:d6:5a:9e:
                    a7:10:ff:79:77:0b:93:90:47:bb:b6:53:c0:0e:49:
                    80:2e:38:ee:1d:71:2b:24:02:4f:15:f8:4b:2f:2f:
                    39:71:3f:5d:54:d7:f3:62:de:8b:c2:32:9c:75:bf:
                    1c:81:b3:0d:bc:d8:9a:1b:22:64:f7:ca:7e:21:c3:
                    6a:30:e5:e8:f4:42:42:00:ae:4b:0c:95:99:41:dc:
                    d5:f9:9a:65:b0:f1:94:55:70:70:ff:36:8d:cb:f4:
                    fb:85:bd:d6:d4:bc:d0:1f:36:77:12:a5:a4:ca:0c:
                    41:63:b8:de:63:d4:8a:db:4c:9c:8b:02:3e:ba:1e:
                    a2:3d:0a:65:91:8d:c3:81:36:94:83:67:91:fa:ad:
                    6c:b2:6e:b4:06:ed:96:0c:25:ee:77:89:70:40:51:
                    51:d1:79:75:cf:a8:a7:de:65:1d:ae:61:c5:33:51:
                    7b:bf:b8:93:2e:03:65:ed:56:16:9a:91:00:2f:ea:
                    88:e9:1b:5b:b0:7d:ab:e8:3b:69:76:14:42:dd:20:
                    ce:f7:8e:8b:db:56:2a:09:fd:b4:fb:08:49:df:7e:
                    f1:56:12:8d:0b:ea:6d:69:c4:04:75:22:19:10:03:
                    2e:bc:88:0d:76:c2:7c:85:08:2b:15:97:12:4b:03:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:15:66:8F:B6:C6:43:37:DE:C7:E8:47:DC:82:B1:73:01:9C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b5276353-d624-32a6-b6c8-a6ce57b41ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:29:de:4e:8e:0b:d9:7e:7c:40:d0:d5:77:82:38:2e:a6:
         32:c9:f8:e7:d0:e4:65:85:77:94:8b:bc:9d:f7:aa:64:1e:80:
         02:1f:da:d8:82:1c:3d:d3:81:4f:8a:af:45:8d:38:89:f6:21:
         49:8f:ce:da:16:0c:53:7f:c1:ae:87:a2:f1:c0:2f:8e:00:2f:
         3f:7e:ff:ab:0c:2d:b0:3a:6b:51:32:20:d9:2f:42:48:fb:9b:
         ac:7f:9f:28:3a:04:fb:8b:e7:a2:c3:2f:7b:8d:cf:fa:b3:2d:
         fc:ce:34:2c:60:42:da:e9:4b:8a:b6:4b:3f:ca:66:84:1f:ca:
         57:1a:0a:c3:61:db:fa:dd:dd:02:9b:17:4d:81:e9:d8:63:52:
         e5:15:ad:81:9c:08:00:6a:95:53:d0:65:f3:ad:7e:39:6b:17:
         7a:d1:6c:5f:85:d1:0d:f8:da:a9:f9:9a:62:92:90:fd:3f:1a:
         69:c7:8c:4a:57:b5:53:66:a1:f0:18:ca:74:1e:5f:95:7b:0d:
         27:9c:4e:f9:3b:2e:bb:29:f0:e6:22:10:12:e2:f3:5a:fe:ae:
         58:16:76:d6:d8:77:29:41:ab:7f:4e:d2:56:84:ef:29:6a:60:
         cf:8f:7c:47:0a:43:92:63:7e:11:6d:f1:ba:36:93:e5:1c:1d:
         f7:34:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:17:32 2025 by rpki-client