Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/830b227f-9332-3fce-b99a-0dcc548ed6fc.roa
File:                     830b227f-9332-3fce-b99a-0dcc548ed6fc.roa (raw, json)
Hash identifier:          84rXV4pvlMJnVommfmbRWPLU+R+AFH3P9vd0+cbF70U=
Subject key identifier:   ED:65:1E:FC:B5:C6:85:FD:D1:C9:4F:64:1D:92:B7:7F:38:DF:4F:EC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B5B074425699924BA5548C600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/830b227f-9332-3fce-b99a-0dcc548ed6fc.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        216.163.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:44:25:69:99:24:ba:55:48:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=fde4c158-a935-4e0f-9579-5f6e985d8aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:b1:95:6b:26:78:ce:87:e6:c7:ef:5d:75:
                    c3:37:30:5f:76:39:e2:48:55:f5:3f:58:a8:61:93:
                    14:29:42:27:4d:f3:4b:40:2d:6d:d9:f8:8b:94:1c:
                    93:47:ad:7d:42:bf:fe:de:e4:ea:8d:ce:30:03:79:
                    fa:45:25:04:8b:da:f0:f6:73:26:7f:76:fd:e5:6d:
                    f4:af:42:ae:51:eb:a4:cf:95:35:78:1e:10:af:69:
                    ed:14:f2:13:51:8f:6b:37:f1:16:6a:62:db:74:b2:
                    f5:45:d2:07:d1:82:56:5b:32:2a:6d:94:7d:2d:85:
                    83:dd:2d:4e:1d:96:d3:6e:d3:fb:64:d9:e5:17:57:
                    e6:aa:8e:00:b7:78:f4:4d:32:3a:66:1c:c8:80:46:
                    25:17:cf:34:95:77:b1:38:49:26:63:6a:8a:35:c7:
                    de:b6:f6:9a:3e:3c:38:29:78:7b:6d:3f:49:d9:ac:
                    8a:37:5b:12:84:8d:f4:20:0a:c7:8e:01:00:9c:70:
                    35:6b:ca:c9:c5:ab:35:24:a4:ed:33:00:ba:f9:d2:
                    48:79:78:9f:97:96:f9:e8:f5:56:d8:58:51:21:58:
                    ad:d4:58:53:a4:96:8b:3a:aa:57:5b:f1:69:bb:55:
                    31:25:99:e0:4b:ae:e2:cb:b1:81:d9:3b:8c:dc:f9:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:1E:FC:B5:C6:85:FD:D1:C9:4F:64:1D:92:B7:7F:38:DF:4F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/830b227f-9332-3fce-b99a-0dcc548ed6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:a1:bf:f9:aa:03:1e:f4:bb:22:45:e1:a4:e7:e4:3d:3e:
         51:5d:4b:f9:38:7e:e2:b2:73:39:40:f2:d9:a0:08:5c:d9:3c:
         2f:d7:0b:0f:cf:3f:fe:3e:59:99:a3:e3:be:51:87:81:32:42:
         6d:72:12:6b:e0:40:06:72:f4:ee:ab:06:62:84:01:5e:2a:62:
         dd:1f:ce:1e:93:c9:22:bd:92:df:14:75:09:51:c5:79:3e:9e:
         09:82:b5:fa:5d:7a:c2:74:e2:02:28:07:ae:cc:21:a7:b1:f1:
         df:9e:68:0d:88:9e:95:f7:a4:ae:5c:bf:5f:b9:c5:21:39:8c:
         c6:bc:4c:26:7b:17:cf:c3:3d:c5:b7:76:bc:9c:fc:0a:f3:ae:
         7b:3b:92:6c:60:46:f1:ce:34:28:91:ed:89:4e:23:7f:6a:65:
         ae:a2:60:97:63:29:e0:9c:4f:53:3d:c3:ff:39:af:f1:53:0c:
         a2:96:87:d2:80:97:15:96:05:7d:db:ba:2b:3a:dc:aa:6b:1e:
         c9:d2:9b:e3:23:43:6c:64:18:99:99:4c:a2:71:f2:25:b6:03:
         f8:05:54:51:1e:2f:81:c2:39:a6:62:30:2e:af:a7:6e:dc:04:
         23:af:f3:40:86:65:17:48:9a:ff:e3:e8:9b:0f:f3:56:36:d5:
         d6:3b:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:28 2025 by rpki-client