Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa
File:                     51ebef56-4abf-3ef7-bc55-1a8d74621254.roa (raw, json)
Hash identifier:          1PvFMMBTwTRAr7znr9a0EXczouW2kLlUENvJvMKkwQ8=
Subject key identifier:   78:D7:5B:84:AB:B1:35:12:30:73:03:C2:0C:2E:07:41:20:65:31:73
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584AE19691706635561303F92840
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     64267
IP address blocks:        152.44.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:91:70:66:35:56:13:03:f9:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5425835e-0b64-485f-a6df-5f0097229b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:61:b2:0b:ff:78:6a:6c:2d:f4:51:82:3c:
                    43:97:3f:35:10:57:ee:36:37:2f:62:dc:26:3c:f2:
                    34:38:71:b1:ce:eb:b9:9a:c6:30:ec:a1:15:bd:e2:
                    c5:02:d6:41:83:ea:b4:61:81:40:30:9d:f3:76:48:
                    d3:df:f4:83:e6:ce:4f:c1:42:ee:7b:fd:e6:8f:57:
                    06:c9:de:b6:0d:91:a2:ce:28:a2:d8:b7:c9:9e:88:
                    ea:58:db:82:c1:ff:a4:3f:71:94:25:b4:f5:95:5c:
                    70:04:e3:94:b4:86:78:9d:90:9f:31:64:07:53:36:
                    eb:31:5d:5d:78:7c:2b:55:83:99:cb:27:a2:33:31:
                    4c:56:4f:1a:8c:d8:ea:92:24:b7:fc:b0:17:32:5f:
                    e6:4e:12:2a:19:cb:1d:e3:3d:28:52:de:a2:ee:d9:
                    2f:e8:47:0f:a4:17:df:e3:3c:9e:e3:42:39:06:f5:
                    53:49:3f:0c:82:a0:2c:fd:cd:de:ce:8d:fe:bf:73:
                    86:ac:4f:2a:39:8d:a8:31:c9:4d:94:52:3f:86:15:
                    af:92:f6:6c:14:76:84:0d:b4:9d:f3:87:db:2f:32:
                    af:0c:83:27:d0:0a:bf:ed:fa:15:82:b6:65:72:3e:
                    50:5b:46:4d:e9:cb:e5:60:2e:a9:1f:a6:47:b2:ba:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:5B:84:AB:B1:35:12:30:73:03:C2:0C:2E:07:41:20:65:31:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/51ebef56-4abf-3ef7-bc55-1a8d74621254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c1:dc:33:fa:b7:a1:5d:43:9e:4f:73:7b:3a:b5:ea:b0:fa:
         04:bb:88:b4:57:4c:7a:ac:2f:e3:6e:f3:81:6e:e6:33:d0:f9:
         82:e7:46:ab:e3:d3:b3:a1:17:bd:23:ee:ed:5c:8a:02:c0:3c:
         8e:5f:4a:8b:ac:2f:ba:b2:ea:e3:6f:b3:a2:5a:df:a8:f1:59:
         fe:bc:4e:4a:ce:c0:e3:e1:d4:e3:e6:ab:ae:24:63:15:f4:7b:
         67:c7:c1:d7:b1:8a:11:3a:d0:c2:4c:71:2b:ee:71:8e:b2:ae:
         86:7e:ad:8c:22:e8:d8:da:6b:6a:4d:d3:60:40:ae:3a:26:f1:
         7a:ff:14:83:59:46:7c:6a:54:4b:b3:fe:87:88:50:96:b5:b3:
         71:07:35:39:c7:e6:cf:7d:d2:3e:41:f7:b3:d6:b2:c3:d5:36:
         63:d6:26:13:4d:d6:bf:48:cc:31:65:21:ba:41:d5:81:33:77:
         3c:db:e1:28:3b:6a:5f:32:ee:99:b8:4e:10:6e:d8:7f:c2:96:
         c7:5d:a4:0a:61:96:19:9c:c9:c3:7e:88:ff:40:89:54:9f:e5:
         04:32:f3:91:f5:ec:2d:5b:0a:2f:87:7a:d4:67:0b:9e:a0:53:
         d6:98:11:a3:ad:61:63:25:cb:77:b3:46:a3:0b:42:9a:6d:9d:
         48:4d:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:08 2025 by rpki-client