Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa
File:                     a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa (raw, json)
Hash identifier:          KRvsteUm1ve+xVPoPIQnXHIK+rK3he3z1W2q2FIIXVE=
Subject key identifier:   B4:E0:40:FF:23:15:A8:DC:FF:C8:56:A1:B7:A5:25:6F:55:D0:46:B2
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584B105E75037C9A997FA1297F80
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa
Signing time:             Thu 17 Jul 2025 22:40:57 +0000
ROA not before:           Thu 17 Jul 2025 22:40:57 +0000
ROA not after:            Wed 15 Oct 2025 22:40:57 +0000
asID:                     5065
IP address blocks:        216.169.100.0/24 maxlen: 24
                          216.169.101.0/24 maxlen: 24
                          216.169.103.0/24 maxlen: 24
                          216.169.105.0/24 maxlen: 24
                          216.169.107.0/24 maxlen: 24
                          216.169.108.0/24 maxlen: 24
                          216.169.109.0/24 maxlen: 24
                          216.169.110.0/24 maxlen: 24
                          216.169.112.0/24 maxlen: 24
                          216.169.115.0/24 maxlen: 24
                          216.169.116.0/24 maxlen: 24
                          216.169.119.0/24 maxlen: 24
                          216.169.122.0/24 maxlen: 24
                          216.169.123.0/24 maxlen: 24
                          216.169.124.0/24 maxlen: 24
                          216.169.126.0/24 maxlen: 24
                          216.169.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:5e:75:03:7c:9a:99:7f:a1:29:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Jul 17 22:40:57 2025 GMT
            Not After : Oct 15 22:40:57 2025 GMT
        Subject: CN=e5ad4f80-7c7f-46ed-ba64-91156a6d7078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:2e:d7:a5:05:5e:7f:c8:de:33:b5:75:fc:
                    a1:47:1f:13:fe:3d:a7:ed:2a:9e:58:c4:85:1d:f1:
                    ad:05:b8:ce:9d:c7:6b:2e:c9:93:f8:1e:30:c7:bc:
                    da:b0:ba:62:ec:2a:ae:4c:77:57:2b:1b:be:bb:4b:
                    84:37:d7:d6:fc:9c:fc:1f:f7:b3:7d:68:58:10:e8:
                    90:ee:3d:a3:87:cb:6e:f8:45:27:f9:a4:b8:8c:ae:
                    50:f0:71:ca:fc:22:b6:ac:f8:68:ba:d9:53:38:0c:
                    88:c2:4e:28:91:5a:23:f7:9b:13:ce:93:d7:85:95:
                    f5:d9:e7:e0:ac:f1:6b:00:52:2e:f1:e0:fb:29:df:
                    ff:12:b6:a8:94:3d:e7:5c:1c:b0:dd:75:d2:81:34:
                    41:39:97:55:16:0f:a2:93:1f:d7:07:89:df:7b:28:
                    13:2e:69:fe:db:c0:49:b4:38:75:9e:5c:f7:f1:76:
                    88:93:10:97:58:91:bf:ae:9b:67:3f:8c:c7:b7:ed:
                    63:24:9c:7a:c7:dc:e7:53:2c:56:bf:61:c9:3d:e9:
                    03:fe:97:32:fa:11:c0:cb:84:2c:13:5f:e1:5e:a2:
                    9e:95:05:96:e0:a2:74:ab:7c:2c:0f:f0:b6:19:22:
                    2b:98:77:04:dd:7c:f6:70:55:37:4f:71:42:37:31:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E0:40:FF:23:15:A8:DC:FF:C8:56:A1:B7:A5:25:6F:55:D0:46:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/a69c5a18-0f97-3e7e-99da-f3dadcf49506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.100.0/23
                  216.169.103.0/24
                  216.169.105.0/24
                  216.169.107.0-216.169.110.255
                  216.169.112.0/24
                  216.169.115.0-216.169.116.255
                  216.169.119.0/24
                  216.169.122.0-216.169.124.255
                  216.169.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:e1:48:e1:9d:79:fa:8e:52:21:a3:c2:b6:b7:fa:0d:4d:
         65:07:14:2b:e4:13:d5:d7:4b:46:41:b9:da:4c:35:14:81:5e:
         cd:a2:8a:7b:52:74:27:e4:98:68:a1:a2:b9:ec:1d:4f:69:99:
         4f:b9:a1:cd:a4:86:d0:4e:b0:92:f1:6d:89:48:4b:38:34:68:
         9a:0d:61:26:2e:a8:70:1c:0d:bc:ff:e8:31:34:ef:ea:32:99:
         ae:73:b3:ae:09:0f:58:96:b6:f4:93:90:eb:a3:eb:74:d0:bd:
         2f:3a:ff:63:7d:8b:ce:7e:0e:51:f9:e5:37:6d:4f:f5:dd:27:
         51:0f:79:a2:2b:b5:18:03:4a:bb:e9:f9:7b:0b:47:76:19:5f:
         35:38:e0:f6:29:b1:2f:28:85:88:f6:68:51:59:85:14:7f:bd:
         2d:6d:d4:9e:e3:e6:54:68:a4:00:af:5e:5e:20:21:09:57:43:
         ec:95:81:c6:5e:35:f8:09:fb:37:56:5f:a3:35:37:95:44:40:
         ba:d9:e5:d7:0d:70:6a:f9:ee:f8:22:ea:af:36:1f:73:98:73:
         a6:e1:1b:8b:e2:e6:c0:50:16:d7:97:69:4d:27:87:cb:2c:af:
         7c:aa:60:5a:4b:d3:a7:6b:1a:28:5c:b8:32:9f:82:04:2e:1c:
         b3:f3:cf:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:26 2025 by rpki-client