Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
File:                     33faf54e-b2b5-3d79-910d-958696a77f7b.roa (raw, json)
Hash identifier:          V2IZA9ApULq1ZHHBEM5qK+RemFodFwfD26iDBs0aBH4=
Subject key identifier:   C3:A2:94:11:D2:FE:5D:31:02:D7:EB:52:C6:D9:2E:80:21:E7:FA:F4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B80B76EDC3B033E94FD93CDE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     64267
IP address blocks:        141.164.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6e:dc:3b:03:3e:94:fd:93:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=d4223bf2-3aab-4fe1-b6de-68fe24c193fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:7f:0e:45:7c:4d:42:c7:3d:22:cf:bd:c6:
                    db:23:22:89:e7:64:43:da:a0:80:42:db:81:16:26:
                    32:a4:54:26:b7:a5:cd:e6:49:c8:30:29:46:42:7f:
                    72:a3:bb:07:de:27:27:1e:f6:74:6f:85:03:eb:a4:
                    7b:8e:d1:a1:50:34:9a:cf:82:39:05:18:9e:3b:81:
                    45:96:55:4c:18:a0:86:3f:ef:7c:a5:de:20:76:69:
                    fb:31:c3:fa:fd:be:15:c7:52:1a:08:d8:5d:b4:aa:
                    9e:91:6a:89:c3:4b:10:1e:af:fd:30:78:71:76:3d:
                    62:c6:89:77:11:e7:1b:7d:0e:be:33:b0:96:df:c5:
                    9d:c8:ac:0d:e7:ef:af:69:f0:45:c1:ba:ce:dd:ad:
                    7c:4f:62:0a:49:c9:c6:41:d8:69:b6:74:8c:5e:34:
                    0d:bc:5f:f0:be:9d:6c:14:17:e3:a2:de:2b:88:ce:
                    99:b1:0c:aa:f5:83:db:35:e3:cf:e9:66:1c:9e:0b:
                    7b:d1:0f:d1:79:00:4f:fb:46:a6:53:3c:ce:5e:dd:
                    db:52:45:cb:60:5b:e1:4d:e1:9e:6e:4a:3a:4f:3f:
                    c9:5d:35:2b:0e:29:cd:70:56:32:54:70:f8:69:d7:
                    cc:7f:6a:1e:83:43:43:0a:ef:9f:34:d1:78:c7:90:
                    33:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:94:11:D2:FE:5D:31:02:D7:EB:52:C6:D9:2E:80:21:E7:FA:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/33faf54e-b2b5-3d79-910d-958696a77f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:a0:d7:95:46:57:1e:87:f2:41:b9:b5:82:56:fd:1c:67:
         d6:db:81:28:53:8b:c4:3a:ad:d6:50:72:c5:9b:ec:2d:c6:5c:
         9f:37:35:97:cd:da:97:2f:8b:c5:d1:6b:98:a1:90:c8:e2:eb:
         9b:91:8f:dc:c9:71:ba:a6:4b:3e:3d:ad:98:ac:ba:a6:c0:bf:
         fc:99:de:d8:82:36:81:e7:6d:71:7c:ee:91:7b:fe:af:b6:86:
         2e:75:b4:14:38:6a:fc:3e:11:2a:a9:c1:d5:60:a4:62:62:c5:
         0d:4e:69:c0:4d:43:c1:b3:59:55:bf:88:ab:d5:7f:8b:79:9c:
         b7:38:78:87:3f:6d:b5:de:54:a7:bf:55:f4:cb:59:e3:e0:7a:
         40:5a:88:b1:6c:3b:5b:7d:24:1f:67:d1:7e:21:63:ba:d1:88:
         7b:a6:09:af:bc:8f:ee:c8:ce:30:53:69:32:7d:d3:6d:24:d1:
         78:ab:2a:0f:d2:85:28:fb:67:39:b1:b6:d3:e8:f5:af:0c:ed:
         a2:3a:ad:25:43:83:20:89:bf:cc:ed:1c:7f:5b:26:4c:41:64:
         3e:20:9b:82:c7:d1:cf:b3:23:a1:8e:3d:00:be:bc:d1:3b:cc:
         33:7b:30:4d:3c:cd:9e:c6:d3:5f:a9:5d:11:73:fe:4d:7b:40:
         13:3b:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:08 2025 by rpki-client