Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa
File:                     fe865831-434a-3edf-910c-d4efd3c3a796.roa (raw, json)
Hash identifier:          H/xSZRKPZy78e33g4BaKTXkAr57ZB0c5Q+D0/3LZTL8=
Subject key identifier:   04:C8:94:D4:C6:47:7B:5D:56:95:2F:74:1B:EA:B0:93:44:41:D7:1E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849F7151E5E8F1CD06ACCB12730
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        170.199.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1e:5e:8f:1c:d0:6a:cc:b1:27:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=269ccaa7-ba04-494a-95e6-1055c7acc4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:c3:03:22:cf:9f:f8:7e:41:51:c4:80:d0:
                    73:73:00:3b:dc:e1:c1:12:81:00:51:78:26:6d:37:
                    69:e1:7c:3f:65:22:ee:5e:24:61:ee:e4:b9:19:24:
                    bd:6c:cc:73:ee:8e:74:1b:87:dc:dd:ed:b1:7b:77:
                    a5:ac:56:19:94:97:8d:e0:2e:cc:2c:80:78:b2:35:
                    76:c2:e3:f2:3b:c6:d7:3d:86:a9:de:b2:c7:04:f0:
                    dd:ed:0f:d4:1e:2b:ef:0d:bf:3d:9e:45:3c:fd:9f:
                    2d:61:8b:8f:97:e3:06:da:bb:2b:f0:c9:2d:b7:b2:
                    9c:cb:f6:48:8b:53:4e:11:93:58:09:38:13:c0:fe:
                    16:c5:e1:c8:f9:8b:ea:07:9d:9f:71:66:ba:87:44:
                    53:8f:6b:55:67:61:f8:21:dd:27:35:bc:c6:7b:fc:
                    03:cf:f3:07:7f:e8:ba:8b:6b:2b:69:89:23:50:8e:
                    cc:26:33:71:4a:a6:87:f7:94:78:d6:10:67:bc:3d:
                    72:4d:3b:b2:16:3e:53:29:56:87:60:e5:70:91:79:
                    f2:89:cf:a0:0b:bf:df:4f:53:b1:9f:9a:35:63:fd:
                    8f:3b:71:ae:84:6a:60:33:49:bb:49:11:0a:5d:f7:
                    1a:71:46:fb:43:6d:0d:67:b9:8e:d1:87:00:70:3f:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C8:94:D4:C6:47:7B:5D:56:95:2F:74:1B:EA:B0:93:44:41:D7:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe865831-434a-3edf-910c-d4efd3c3a796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:a4:50:1f:3e:41:d1:aa:ab:55:e8:7c:ac:43:5d:94:fb:
         0c:04:9e:d6:36:b5:c7:29:37:63:39:74:28:0e:4f:8c:1f:43:
         96:fc:d2:ce:ff:85:d1:c5:14:d5:b3:af:ba:9d:1f:60:15:a9:
         73:63:c0:c9:6d:e4:b9:d9:c9:fc:78:74:80:ac:b4:1c:7e:58:
         7f:04:e6:1d:db:af:ad:ce:8e:c2:9d:35:3f:f2:38:69:45:6d:
         9b:4c:83:97:ae:dc:cc:6e:26:d0:a8:32:98:b8:85:d5:36:9c:
         9a:cf:a4:84:a0:c0:95:98:b1:ab:c1:96:ee:97:62:50:f0:59:
         95:58:e0:d2:bc:8b:0b:b7:4a:dc:6b:f2:6f:a3:17:01:8a:75:
         d3:83:3b:35:46:0d:00:ba:fa:25:7f:9b:20:01:c8:cb:6a:13:
         c3:bb:c8:9d:13:34:f5:6d:e6:b1:c7:52:71:bf:5d:e1:93:b4:
         c7:f3:3d:69:7a:0c:8e:3c:b5:fa:1e:2c:9b:f2:73:1c:19:30:
         bc:b8:3f:48:41:4b:7a:aa:a9:d3:c8:7d:22:de:10:54:be:28:
         83:ff:cd:6e:92:87:11:36:4c:a3:bf:ff:1d:78:c8:32:b1:0b:
         0f:ae:6a:d0:80:96:03:09:76:1c:9e:14:a2:8b:95:4c:a9:5c:
         e6:a8:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:44:28 2025 by rpki-client