Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1cd0303a-a81a-351d-9f9b-cf87dbc7177c.roa
File:                     1cd0303a-a81a-351d-9f9b-cf87dbc7177c.roa (raw, json)
Hash identifier:          QEZpYl2VBr/QrWV1urkGUzvEfeAScgZwBCnGXZPOSEI=
Subject key identifier:   D8:97:69:A1:5A:31:17:77:2F:58:13:24:7C:22:0C:17:EC:66:D8:1C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C582CE6258E8CE794A860
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1cd0303a-a81a-351d-9f9b-cf87dbc7177c.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        152.44.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:58:2c:e6:25:8e:8c:e7:94:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=60eede5a-4331-46a7-96e8-f63fd7cd28df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:93:66:21:96:84:c3:90:06:e8:3d:9f:af:
                    83:4f:90:1c:03:f2:92:cd:9c:13:b3:77:fc:a5:e4:
                    e8:98:09:ab:a3:b8:6d:97:3f:58:9a:58:af:2f:bf:
                    52:35:03:e8:1d:31:1e:31:25:6d:92:95:8d:56:64:
                    c9:32:12:ca:61:19:4a:4c:e6:83:4b:d6:54:12:49:
                    fe:47:6e:fc:6e:fa:2b:94:46:b1:82:14:03:e9:e5:
                    50:47:49:87:6f:49:1b:51:07:51:d7:08:b3:a4:aa:
                    45:d3:0d:db:57:ed:81:96:fe:fd:07:e1:61:90:a5:
                    01:dc:a6:a9:cb:6a:12:b2:55:fa:61:d2:d4:42:e7:
                    bd:c1:a4:9b:96:94:0d:52:8c:71:52:90:e4:98:08:
                    6f:2b:a3:83:57:f3:80:80:3c:70:93:bd:ef:35:68:
                    4f:dc:31:a4:a1:aa:a6:d6:29:f4:14:07:07:63:59:
                    e5:92:98:b2:89:66:06:e4:31:f6:28:34:1b:d6:9e:
                    20:6e:a5:7d:7b:bb:64:9c:24:1c:1b:59:e7:6c:0d:
                    dc:64:fd:e6:25:46:66:1e:00:9f:50:d5:74:38:77:
                    56:27:3b:39:fe:22:b3:0e:22:9f:76:2e:ca:db:bd:
                    9c:69:71:ab:59:51:42:83:c4:41:0b:3a:80:35:77:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:97:69:A1:5A:31:17:77:2F:58:13:24:7C:22:0C:17:EC:66:D8:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1cd0303a-a81a-351d-9f9b-cf87dbc7177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:e1:b3:1c:32:b6:d5:04:df:b1:6f:ff:fe:2f:6a:19:ca:
         bf:ab:cb:38:6e:2b:75:e0:79:c4:0d:45:98:0b:54:37:34:de:
         fe:d2:b1:c6:74:20:4f:5e:a9:fb:12:14:8a:f7:dc:a2:ed:b0:
         67:ac:53:6c:ad:6e:9e:89:bf:1d:e1:d4:19:fa:ee:89:51:0c:
         d5:ef:f3:7b:8f:f1:26:5e:c9:d1:2b:d8:8a:22:f4:bb:3c:c9:
         64:9b:24:71:34:53:64:73:f5:21:30:35:12:08:cc:88:16:ff:
         10:c2:9c:09:19:86:3c:f3:ee:79:68:27:c0:b2:4b:26:77:5a:
         d7:8e:36:75:4c:df:11:23:cf:64:2f:f0:2e:48:a6:d4:1f:24:
         a0:8f:8e:54:04:67:2c:2e:8d:c4:f4:3a:94:20:c0:ad:4a:90:
         21:d1:f2:47:0f:64:04:11:f2:2d:37:f3:a4:91:c0:dd:10:6c:
         d2:ac:fd:b2:f2:1a:dd:7f:29:4c:fb:be:63:75:3a:9e:7a:7e:
         49:c2:33:bf:3d:b5:70:36:0e:bc:03:29:b5:d2:b7:a6:72:d9:
         97:50:ae:d5:5a:92:64:c8:b7:17:00:c5:f8:73:2e:62:9e:3c:
         66:f2:c2:e2:3b:72:37:ca:26:33:29:15:4a:7e:17:11:37:59:
         3f:1d:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:35:36 2025 by rpki-client