Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa
File:                     44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa (raw, json)
Hash identifier:          oAOAwyu/ONmq9EpUNLTDW5r4rviovQPocitJdprY1SA=
Subject key identifier:   3F:3E:B4:E8:1E:77:5D:3D:94:FB:33:B0:4B:09:29:6C:94:8A:3C:79
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B821CBA68EA6C06D438DF3780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19961
IP address blocks:        216.255.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ba:68:ea:6c:06:d4:38:df:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2e6af8de-849d-4449-9730-a99b5ff976be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:6f:00:1b:98:8f:aa:8a:85:34:e3:17:b6:
                    6b:b3:45:95:97:ee:37:04:e7:c0:9a:00:13:aa:a0:
                    52:0d:10:0d:f5:ef:57:5d:f7:97:51:b3:25:e3:81:
                    3c:1d:3e:33:f1:14:b6:cd:80:24:37:a6:bd:f9:17:
                    c1:ee:72:db:32:e4:b2:9b:fb:0f:9f:bb:ae:3a:2f:
                    ee:ae:07:5b:21:da:04:d5:ee:6b:71:f4:b4:60:dc:
                    bc:30:ca:69:08:34:c7:41:67:b6:ff:61:6b:3f:d5:
                    a5:fc:ca:d2:b4:3e:ee:45:15:48:b0:f3:4e:2f:88:
                    ab:55:e5:de:00:0c:53:cb:e4:e6:32:14:d1:33:46:
                    f8:1c:19:29:3f:e6:0b:29:87:5d:94:1b:c8:a8:fe:
                    7a:d4:b3:5a:f6:20:f6:da:c8:f8:2d:87:bd:8f:b8:
                    b2:c6:ac:79:72:19:83:31:00:21:d5:52:b3:48:f9:
                    c5:05:ce:f7:a9:97:d8:5f:bb:5c:ec:57:e3:d5:03:
                    f8:7c:9e:04:95:77:f0:b3:d7:f6:ef:9b:a9:1f:da:
                    f4:1e:ea:c4:e4:d8:39:00:c9:ee:2e:02:fa:7c:cd:
                    03:a0:db:c4:30:60:44:4a:33:01:de:53:a0:b9:2e:
                    20:60:13:d2:78:b2:fa:18:d9:de:95:f3:33:32:91:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:B4:E8:1E:77:5D:3D:94:FB:33:B0:4B:09:29:6C:94:8A:3C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44910b2f-8c43-3d7f-a4a0-7b5537d269e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:d2:04:6a:d8:60:21:e9:b8:4e:53:0f:06:d9:d8:ee:c1:
         b0:ff:02:84:66:3d:b5:de:09:88:f7:58:8f:45:2f:76:81:94:
         17:ec:2a:d3:0f:88:20:4c:49:50:5d:1a:4a:e5:a8:c6:60:b9:
         6d:57:b3:4c:fc:4d:4f:0f:22:1c:1e:3e:1c:21:2c:dd:08:6b:
         96:c9:4b:02:91:08:83:eb:fe:e6:44:d2:1c:72:34:b9:e2:51:
         52:a9:30:07:69:7b:ee:77:33:93:c6:6d:a5:8b:4d:5d:25:1c:
         7b:fe:3c:02:d7:40:03:04:bb:9e:29:76:b9:6e:0d:c1:60:7c:
         ae:32:20:4b:88:51:d5:5b:fb:a9:b4:f4:92:66:2c:d0:c0:04:
         e2:a9:3a:c8:8f:45:8e:bb:be:07:1f:8e:64:56:69:12:d9:a0:
         a2:75:8d:d5:cf:cc:54:05:8e:69:c2:2d:ab:47:f9:94:fb:e5:
         9c:5e:b7:42:9b:a7:8f:bf:a1:4f:04:14:4f:c7:a4:66:c9:0e:
         e4:7b:d0:e5:c9:56:60:98:d3:1f:fb:77:75:6c:f6:e1:56:7d:
         cf:cc:d7:27:d5:04:32:f7:5c:92:04:f9:81:db:67:b7:8b:4c:
         9f:df:97:d6:c6:dc:f9:fd:39:99:b4:96:47:76:d8:c2:7c:26:
         ee:0a:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:48:52 2025 by rpki-client