Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d7dcf587-91be-39dd-b598-83e2d38ce746.roa
File:                     d7dcf587-91be-39dd-b598-83e2d38ce746.roa (raw, json)
Hash identifier:          QIDnwOjc+6kCPuMimfOr2mCMLs31U2AZRC89+P9dObw=
Subject key identifier:   55:35:E9:5B:2E:3A:E3:91:D8:75:AE:C3:61:10:44:7B:B3:12:07:43
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38C5AB1511BCBAAA1A333980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d7dcf587-91be-39dd-b598-83e2d38ce746.roa
Signing time:             Tue 17 Jun 2025 13:44:18 +0000
ROA not before:           Tue 17 Jun 2025 13:44:18 +0000
ROA not after:            Mon 15 Sep 2025 13:44:18 +0000
asID:                     22516
IP address blocks:        209.163.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:c5:ab:15:11:bc:ba:aa:1a:33:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:44:18 2025 GMT
            Not After : Sep 15 13:44:18 2025 GMT
        Subject: CN=1cf4b350-8f53-48a0-a275-c3f142e27267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:fe:94:49:41:ea:bb:cd:de:b2:83:ab:b7:
                    5d:d6:d1:b4:cb:3e:7b:fd:03:86:2f:5f:d4:d8:2c:
                    ca:b8:31:e1:5d:61:3b:30:d6:b7:a2:85:77:67:13:
                    6a:a6:b5:a1:6f:53:69:f9:8a:97:a9:7b:0b:7d:96:
                    65:94:c7:1f:c3:b3:31:2d:de:01:ed:c2:02:33:24:
                    54:2f:1b:ef:f0:c5:8d:0f:e8:d4:bb:76:74:a4:92:
                    e5:7b:2a:e9:c7:0d:b4:f5:47:02:56:4b:ff:43:8d:
                    a5:58:c3:db:3a:b4:9d:47:17:5a:9d:27:7f:74:6c:
                    10:b6:59:84:21:3d:ff:5f:67:3e:07:d5:99:12:6a:
                    38:9a:d0:1c:fe:3c:68:70:bd:b5:2b:a6:53:14:05:
                    7e:8a:04:4e:2e:54:d5:e1:e5:db:7d:53:2b:60:07:
                    a0:c7:a5:3f:b4:33:59:a5:7b:a3:52:4f:04:92:f1:
                    77:05:16:28:bb:6b:61:fa:b6:bc:51:9f:60:90:ec:
                    f2:37:59:53:8d:1f:13:14:68:cc:1c:94:4f:b6:2e:
                    1f:ec:b8:3a:7e:83:27:44:01:42:80:e0:2b:46:53:
                    b9:34:76:d9:f3:41:19:82:d1:30:ca:5e:54:89:39:
                    83:ce:17:b3:54:83:43:8c:56:7e:34:ce:61:c6:97:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:E9:5B:2E:3A:E3:91:D8:75:AE:C3:61:10:44:7B:B3:12:07:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d7dcf587-91be-39dd-b598-83e2d38ce746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:11:65:7e:5e:50:91:40:99:b1:3d:80:fc:4b:3e:dd:70:
         2a:d7:f3:12:16:4d:c8:be:c6:95:87:79:7d:42:7f:6f:da:34:
         7c:c0:32:aa:ad:0d:e4:f8:e3:90:da:6c:d8:51:07:d3:34:4d:
         fb:83:ac:aa:77:96:fb:d9:ba:91:bb:25:4a:5b:76:5e:5a:bd:
         a6:f5:6c:72:03:cf:5d:f2:8c:0f:fb:6a:fa:10:f6:81:da:16:
         7e:c2:23:6f:0a:06:0f:0e:c8:17:7a:dc:a5:17:96:be:67:ac:
         1b:32:d4:ba:da:6c:f9:9a:c8:df:9d:2e:18:2f:07:a3:d3:6c:
         b3:11:e7:e9:06:66:1a:02:76:7c:83:4d:e9:7c:1a:f6:d7:f1:
         2a:fe:ec:ce:fb:02:e9:3a:38:e0:a9:58:78:00:3a:0c:79:57:
         11:30:ed:84:14:76:20:03:3f:41:e1:44:34:70:67:c6:a4:29:
         ed:88:61:cb:90:cf:76:7e:96:6b:fb:55:bb:32:7f:5c:02:f6:
         dd:97:f2:67:30:a7:31:92:c6:68:4f:25:bd:a5:10:9c:fb:b5:
         b8:c9:62:7c:d3:7f:dd:8e:03:d3:a3:0f:bc:01:a9:1f:e3:6b:
         1e:22:7f:23:06:88:19:03:95:54:5a:2b:16:ce:33:8f:ca:fe:
         5c:d1:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:35:33 2025 by rpki-client