Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
File:                     2f4be69b-9bf8-3179-b092-a6686655caeb.roa (raw, json)
Hash identifier:          UuPcTuS0isIDtX+vxHeuKuI+GvDxxQqrsUOx8Krjbsg=
Subject key identifier:   F0:8C:79:65:56:29:37:7C:59:28:4C:77:91:E5:BE:CF:14:5F:9B:17
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB4124772BB66770A6080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     64267
IP address blocks:        168.91.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b4:12:47:72:bb:66:77:0a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=4c2b7c7d-76cb-43ef-a778-b7d615f727c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:6b:a1:0d:10:53:bb:b3:96:73:ea:c0:b0:
                    fe:b2:a6:40:0e:2f:2b:04:00:ad:6d:33:c4:7a:72:
                    69:c0:e9:9b:c2:d4:d5:d5:27:f3:39:0e:a3:76:52:
                    11:82:a1:52:32:de:84:d2:48:19:2a:bb:bb:e1:8e:
                    70:3a:86:48:d8:69:34:b6:d9:05:0b:74:ea:01:5b:
                    d2:0f:7e:3b:c7:c2:d6:b5:a0:b3:1d:65:13:5b:1c:
                    e0:b5:24:a4:01:86:90:fd:a9:9d:01:53:c8:80:82:
                    05:d4:df:2e:e8:12:f7:c7:12:89:ec:2d:0c:06:2c:
                    f6:a7:81:52:78:ca:57:32:0e:96:ff:24:c4:ae:c4:
                    88:81:d3:93:09:7d:d7:a0:bc:91:2c:ce:38:8e:fc:
                    f8:cc:ba:0d:31:05:60:e5:b5:d8:eb:8a:31:d6:fe:
                    6e:c7:07:82:3f:11:78:5a:9e:66:d1:3f:9e:ea:99:
                    2c:d7:16:0d:ad:c6:5e:6e:13:32:0f:ef:28:15:c5:
                    a6:e2:f5:d8:e5:bd:68:16:87:cd:59:81:52:f3:8e:
                    4f:ad:03:0d:ea:37:f5:1c:8a:b5:59:ac:d5:57:16:
                    b4:d4:01:9c:d2:57:e3:23:36:b4:fa:94:ff:e0:87:
                    d9:7a:a8:d9:6c:71:c2:ea:dd:c4:39:d4:40:e2:91:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8C:79:65:56:29:37:7C:59:28:4C:77:91:E5:BE:CF:14:5F:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:76:35:f1:7d:d2:4c:dd:72:99:50:0d:27:37:8d:7b:47:c0:
         42:d7:2d:71:b5:b0:57:62:0f:8a:ed:9a:78:eb:2b:3f:d8:04:
         be:82:89:f1:09:24:46:09:09:d5:d7:36:9f:2c:35:09:ce:50:
         b0:68:9c:69:cc:f6:ec:86:b7:c8:83:b7:6b:62:73:56:d5:20:
         be:69:7c:d9:c0:be:11:28:fa:4d:a6:af:86:a9:3c:fc:b6:a0:
         40:a0:d3:6f:46:14:42:cd:b3:b0:d8:aa:90:3a:af:e2:28:bb:
         49:dd:90:2b:46:2b:16:8d:33:ef:5f:de:20:81:7d:59:f4:5c:
         58:f3:52:14:4d:50:d3:22:81:9f:b9:47:5b:72:a9:d3:0a:2f:
         0b:25:ac:c8:61:33:da:4b:9b:c5:1c:1b:73:db:50:ec:84:99:
         48:af:8b:c7:e9:49:99:26:7f:04:66:1b:ea:69:01:25:54:b6:
         79:59:27:b5:ec:d9:58:a7:15:35:23:ea:51:bf:25:a7:f8:0d:
         8c:ee:78:0f:ad:20:50:43:87:02:57:62:15:7c:ba:0e:84:22:
         07:21:c3:8b:7d:e9:24:ab:23:1a:45:b5:07:5e:67:53:2b:b6:
         5b:9c:dd:a9:b0:ca:f5:b1:9a:6f:23:a2:14:1b:e9:b2:d8:f9:
         67:21:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:42 2025 by rpki-client