Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a7ba52ae-be17-3e8c-b9ae-a2295106bafe.roa
File:                     a7ba52ae-be17-3e8c-b9ae-a2295106bafe.roa (raw, json)
Hash identifier:          n+Fy3J5AkS4hcSHMnbQbzdo0otPEv2o3yR0YEz9WMR4=
Subject key identifier:   A7:38:5D:A6:46:39:C8:02:0F:D6:72:34:48:99:F7:02:35:1C:9A:21
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6202362C116FD9277404FB10
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a7ba52ae-be17-3e8c-b9ae-a2295106bafe.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     7018
IP address blocks:        168.91.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:36:2c:11:6f:d9:27:74:04:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6c741b77-99dc-45d9-a950-bec3fa8aabdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:d6:e5:de:e6:a7:6c:f5:37:e1:72:21:f0:
                    b0:6f:c1:4e:76:40:7e:55:38:22:76:06:fa:fa:60:
                    cd:92:89:a9:31:25:2a:b2:de:5e:ea:b1:b8:5e:be:
                    c8:4c:16:8d:39:b0:a9:8d:da:68:bf:53:af:44:01:
                    a2:32:0d:77:03:ed:f0:9d:45:79:13:56:df:93:4d:
                    61:ae:b1:99:95:78:57:f1:35:be:33:3a:85:d5:3d:
                    a4:e5:d4:d8:ab:b7:7a:57:a6:04:0a:7f:ea:8e:f6:
                    4c:bc:fd:e9:2a:e4:0d:d5:42:58:c9:6a:8c:fa:9f:
                    ab:84:cb:cb:5d:01:99:b5:4b:e2:2c:14:92:c9:c4:
                    a1:80:28:7c:c0:cc:dc:8d:ee:3c:58:6c:4d:ab:f1:
                    8d:41:e6:91:3a:85:76:15:df:0e:a8:2e:ac:d6:32:
                    5e:3a:f6:25:66:eb:6d:d1:77:86:fa:fa:c4:07:1d:
                    02:c4:a6:58:85:a0:49:cc:36:6a:52:c7:2b:19:7c:
                    0b:f2:3e:74:45:bf:08:4e:14:5e:65:94:0b:0f:65:
                    da:08:d1:d9:07:db:68:52:c2:51:16:c4:9e:fb:c9:
                    40:52:3d:da:ff:a0:ab:f9:37:cb:06:46:e1:ea:c6:
                    9f:5f:9a:76:13:a5:81:48:07:3f:ec:2d:7b:15:3d:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:5D:A6:46:39:C8:02:0F:D6:72:34:48:99:F7:02:35:1C:9A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a7ba52ae-be17-3e8c-b9ae-a2295106bafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:1d:07:f2:40:db:82:f4:95:64:82:fd:dd:4c:fe:d5:83:78:
         40:d3:2b:9e:05:44:ae:1a:8f:60:f1:c2:53:88:cf:0d:12:da:
         dd:08:0e:3c:08:eb:a3:c5:29:89:67:35:de:87:28:58:2e:f9:
         1a:61:1e:9c:12:69:05:a0:ff:86:31:7b:8e:35:36:3d:92:7f:
         15:f3:9c:0c:4c:07:51:23:6f:33:f4:93:0c:08:ec:13:ca:84:
         ad:37:d3:e0:58:0e:bc:fc:e4:79:d3:fe:38:84:f6:5e:de:18:
         fe:d3:7d:4d:22:06:fd:97:00:81:b1:3b:b6:09:ba:fd:ce:0c:
         c4:a3:f0:a9:4b:c2:02:6a:d5:e2:bb:46:f1:fa:ce:72:28:82:
         a6:a3:d5:84:78:b0:42:14:ab:cf:fd:4a:51:8c:cf:38:c4:ba:
         5f:2e:c4:70:e8:ce:54:27:ef:79:f2:4c:57:91:2d:c7:f5:89:
         e3:6a:54:77:a8:13:fd:6f:49:e4:e5:ae:51:53:48:58:1d:f3:
         2f:2b:30:b0:aa:a1:4d:49:a7:5c:35:a5:e7:90:64:10:d3:e3:
         bb:37:f9:df:49:fc:18:75:d7:81:ae:de:61:56:49:b5:7b:7f:
         dc:8d:1f:fd:e2:4f:82:8d:88:86:d8:34:a9:95:13:5e:f7:4f:
         08:ac:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:34 2025 by rpki-client