Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3adbc084-366a-37f2-857c-0fe08e4a1ddf.roa
File:                     3adbc084-366a-37f2-857c-0fe08e4a1ddf.roa (raw, json)
Hash identifier:          8VjNuctGSBMqYyrneYeQ6WwaqcRWSDGd3LZYZzM3QlA=
Subject key identifier:   C0:57:8D:68:C4:DD:BE:83:75:EF:E3:F7:6D:47:83:E9:4A:B7:50:DB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6E91FB4CCD6573E5A36359A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3adbc084-366a-37f2-857c-0fe08e4a1ddf.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     397630
IP address blocks:        216.230.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fb:4c:cd:65:73:e5:a3:63:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=bba57f1a-6506-4bbb-baf3-5e7179fa611b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:39:54:76:0f:61:17:40:16:1c:60:1a:d1:
                    72:41:1f:c1:8a:5f:45:91:f9:20:5e:ee:56:f1:15:
                    99:60:46:fc:c8:13:4b:c8:16:81:c4:88:d7:f1:52:
                    bd:8e:a1:6d:0a:1d:7e:cf:94:c1:02:05:5a:05:63:
                    b6:b4:b6:8d:4f:d6:0a:53:33:26:97:b4:b2:87:60:
                    47:12:d6:2e:37:02:e0:36:6f:2b:43:6d:93:59:39:
                    36:74:70:8e:ae:1f:fd:54:88:c7:35:ac:3e:eb:4c:
                    5f:e8:34:03:aa:b5:2b:12:3c:d3:9a:52:5d:69:e9:
                    f9:14:50:dc:e8:3d:d6:cc:a3:67:fe:8d:af:ad:c9:
                    ed:0b:4e:f8:e4:9f:0f:2c:0b:29:8e:3b:6d:90:48:
                    2c:30:1c:6d:93:46:36:14:2d:4c:5a:fa:86:a2:18:
                    ee:c2:c4:99:68:d8:d4:c8:5e:c7:e5:57:7b:9f:c1:
                    33:57:ed:8e:16:0d:31:74:d4:41:1a:d1:e0:2a:12:
                    1e:95:92:94:bc:5b:8c:0c:75:ec:06:8c:0f:e5:5b:
                    bb:0e:2d:a5:f2:f6:0a:62:df:06:06:e4:58:87:ba:
                    7b:ea:c4:0b:93:f4:a6:f6:5f:5f:ec:66:d5:b7:ea:
                    b6:71:bd:ad:fd:15:96:57:36:22:59:83:16:bd:06:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:8D:68:C4:DD:BE:83:75:EF:E3:F7:6D:47:83:E9:4A:B7:50:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3adbc084-366a-37f2-857c-0fe08e4a1ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:5e:d9:01:a8:bb:03:66:0e:b7:c3:89:a6:41:bd:88:dc:
         2d:30:b1:ca:43:f6:0f:66:4d:03:13:58:ae:a6:bc:bc:1d:c4:
         e3:2a:d2:fd:68:67:3b:22:1c:ca:67:c5:c5:b0:65:2f:6d:99:
         77:b7:89:32:ff:b9:82:4c:ee:18:ba:33:61:23:11:70:d5:9e:
         7e:ac:39:35:e6:13:72:f1:bd:61:f0:0f:fd:da:3f:f4:43:28:
         3f:8b:5b:25:bc:1e:9b:0e:9b:c1:58:c9:c5:f3:4b:3c:cb:52:
         a8:4f:de:38:60:0e:06:dd:a4:f5:8d:2b:d3:e7:75:f1:d7:30:
         0c:e9:a7:8a:9d:7b:18:6f:9a:11:c1:51:ba:2f:00:bf:8e:68:
         6c:8e:57:29:40:fa:80:9c:23:5c:08:eb:7d:6e:fc:22:d0:11:
         36:ff:21:0a:4b:2a:9f:d6:b1:73:fd:bb:29:ec:4c:47:4e:f0:
         bc:98:03:05:52:d1:5e:b4:28:19:13:9a:f8:c0:85:e4:53:81:
         04:1a:97:fc:94:1d:9d:bb:d0:86:83:3e:d2:fb:a2:5b:7b:95:
         a5:93:07:4c:71:2b:af:ae:11:92:17:5b:83:b7:09:fa:7b:f0:
         21:65:41:9f:ef:52:1d:a8:36:7b:10:67:88:d3:2c:24:84:f4:
         40:b8:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:07 2025 by rpki-client