Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa
File:                     f6631a5a-2668-398c-87e1-c8c974958b25.roa (raw, json)
Hash identifier:          4bIFaxY50D8QoxMmpNmK+v5GIc5+X+8ZnuBRlRvRzLU=
Subject key identifier:   F0:C3:42:72:DA:7A:26:0F:0A:E4:49:D2:1B:98:73:19:6A:FA:41:AA
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B4E7713EC7011AB82A84C1DE0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     204325
IP address blocks:        192.228.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:13:ec:70:11:ab:82:a8:4c:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7c4b2b71-b685-4b75-9c46-800f99bee467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:ec:28:ff:24:51:73:38:6e:de:8b:ea:43:
                    dd:2b:aa:c3:b4:fb:6d:9a:9e:fd:b2:0a:f9:b1:c3:
                    ff:22:e6:4c:03:c7:2b:6c:a8:24:73:47:29:97:07:
                    13:94:86:d8:d6:c0:98:7b:ab:dc:18:8f:9c:3c:9a:
                    db:f9:22:59:cd:a6:2a:09:98:3c:fa:af:b6:ec:1c:
                    7e:18:97:7a:d5:7d:b2:ef:66:33:15:12:72:b2:6e:
                    d4:d2:b2:d6:ed:9d:00:96:d5:51:a6:2f:2d:a3:f0:
                    58:bb:62:6b:27:60:21:e1:96:41:20:a9:71:85:8a:
                    63:09:2c:75:e4:3e:41:d9:13:1d:f5:c1:44:3e:74:
                    b1:18:9f:7a:b8:7e:83:3a:af:c6:03:80:34:b4:7e:
                    18:9d:2e:30:5b:98:3b:6c:5c:ba:df:cb:48:ad:38:
                    bf:af:3f:55:9b:b4:2e:44:2c:57:bc:1c:6a:f6:08:
                    69:70:db:e5:66:e3:de:c1:2c:48:5f:b4:e7:f6:ff:
                    fd:d5:37:ca:ec:be:3f:1c:7f:32:09:53:d8:cc:fb:
                    eb:4c:90:45:73:a3:2c:a1:62:49:84:f4:ac:20:af:
                    7d:cd:be:54:c0:6d:69:16:2e:bf:ce:9c:81:19:10:
                    28:3a:a4:3a:02:7c:ae:21:e5:8f:5b:52:78:c5:5a:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:42:72:DA:7A:26:0F:0A:E4:49:D2:1B:98:73:19:6A:FA:41:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/f6631a5a-2668-398c-87e1-c8c974958b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:be:40:07:0b:bd:f4:be:da:b2:1d:63:1a:5e:88:23:9e:
         d2:dc:07:85:4d:f3:45:97:fd:ef:8b:2f:66:98:7c:34:e3:ef:
         c6:05:3c:22:22:f3:b5:41:2a:4c:ae:10:46:62:7c:0c:d8:47:
         0c:ca:1a:d5:57:b4:49:ea:89:d9:d9:16:be:fb:50:78:76:e8:
         8a:97:72:35:27:71:62:68:6d:b5:3d:39:de:56:51:bf:5e:e4:
         76:57:ef:05:10:73:87:bd:9b:07:57:96:6e:49:fc:2a:d1:61:
         4e:d0:b6:e8:b3:d8:b2:b9:f1:bf:5d:22:c8:61:07:62:ca:9e:
         87:71:32:fa:a6:16:ef:49:d6:04:b6:35:10:06:97:a7:ea:a7:
         76:75:94:48:2e:66:d9:08:75:7d:e3:e4:7f:45:58:9e:b4:d6:
         f5:d5:69:e0:34:e0:0c:c5:f9:0c:43:85:77:89:e3:e1:de:7e:
         eb:61:39:3e:f2:18:af:1c:a6:db:a0:d4:b0:c9:a3:66:a5:cd:
         7a:3a:a0:05:62:40:5b:ab:d9:98:a1:45:46:20:f6:88:67:b2:
         d3:04:4a:06:be:78:4d:72:3e:71:f9:3b:3d:05:60:0a:5f:7e:
         e2:b6:4c:88:c3:d7:00:8d:df:5a:ac:67:12:cd:f8:ca:2e:c4:
         2d:f1:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:53 2025 by rpki-client