Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
File:                     ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa (raw, json)
Hash identifier:          8Jra8mVP4W8dRKyTuLLxz/RNM/83bVV7i0JkUjKSiYw=
Subject key identifier:   98:D6:A5:A6:71:08:81:7C:56:0A:77:0C:E7:2F:5E:67:D7:32:68:E8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6BC7576563A235ED43315A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     64267
IP address blocks:        152.44.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:57:65:63:a2:35:ed:43:31:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=a6b8d989-5b9f-4881-8c25-66b7e28ebb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:c6:fc:21:01:0a:f5:d5:31:cd:92:3c:87:
                    5a:4f:6a:09:ed:31:1a:04:8b:fa:6f:a5:c3:25:a4:
                    c0:55:32:ce:de:63:53:4c:fe:70:1f:79:5c:06:a0:
                    f4:cd:db:bd:47:28:26:7f:59:f7:ab:7f:73:c9:0b:
                    22:8c:96:8f:11:d5:5b:ca:44:e0:96:c2:bb:ee:e5:
                    99:95:3a:08:6f:63:37:3f:05:c4:0c:6e:52:b1:fd:
                    c6:f2:2b:55:46:75:aa:8d:ca:a8:5c:86:47:93:a1:
                    b5:30:a6:bd:65:35:b2:28:65:8f:f5:26:c1:7c:55:
                    65:e3:0d:99:de:98:ce:38:5a:57:c8:3b:27:96:97:
                    d2:a3:05:2d:47:05:d7:df:84:0a:66:79:0f:ee:f9:
                    10:e4:f5:da:67:da:7c:0a:17:39:75:ad:1e:fc:b8:
                    47:79:44:ba:84:fe:ca:57:cb:e3:ee:e4:40:85:0c:
                    8d:42:48:7e:79:23:02:00:cd:eb:d9:78:2d:76:78:
                    38:9e:31:50:67:5f:9c:10:ba:fc:24:69:de:5d:65:
                    f7:ba:34:97:a4:e8:8f:aa:85:5b:8a:03:54:7c:44:
                    b9:c5:51:81:57:0b:73:24:8e:c1:eb:31:27:e3:a6:
                    89:fd:6e:07:75:10:ff:e4:eb:86:25:80:72:15:ac:
                    69:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:A5:A6:71:08:81:7C:56:0A:77:0C:E7:2F:5E:67:D7:32:68:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8f:2a:2e:81:9b:d5:c0:fd:01:6e:b0:df:76:d0:3f:5e:aa:
         41:e8:15:d5:e1:c4:ae:61:76:d0:e8:ea:51:c6:b6:cc:fa:f6:
         53:5c:a3:54:04:ac:4f:1b:d4:ea:14:4e:a1:30:5d:34:d0:0b:
         49:62:e3:be:f1:90:57:71:66:ac:26:d7:e3:ae:3a:27:b4:da:
         f3:11:4a:e4:2b:0e:17:0a:65:87:e2:8b:2c:02:a6:8c:98:48:
         0e:ee:16:70:16:fc:d3:e1:80:0e:27:28:aa:1c:89:14:3e:3b:
         cb:52:e6:7b:ef:15:82:a4:d7:a4:aa:49:57:c2:c3:f9:2d:cb:
         99:c3:bf:e2:55:f7:10:08:c5:90:f3:71:53:eb:f0:9d:35:18:
         e9:9e:a6:ae:9b:ce:dd:49:d3:25:ea:01:71:07:a7:d1:49:20:
         93:a4:d0:2a:96:65:83:14:07:4f:33:d0:8d:a5:e3:8c:ce:ce:
         77:01:f3:dd:39:d3:54:31:7d:6b:32:c2:f3:ae:91:27:a0:cd:
         fb:45:1c:6a:bb:25:de:ce:b7:76:4f:16:31:0a:7c:88:74:83:
         46:eb:69:39:43:33:86:2d:ce:fd:26:a0:af:e9:d5:76:2b:c3:
         34:00:64:a1:b9:33:35:d4:d7:c1:64:b9:a5:59:1c:51:1c:4d:
         95:28:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:42 2025 by rpki-client