Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa
File:                     2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa (raw, json)
Hash identifier:          9ksMixgWjm9YIpUA7Egz7k07P9co4/Tp6OgvF8pJ2dQ=
Subject key identifier:   24:2E:CE:DC:1A:48:02:7D:27:0E:FC:9F:74:55:2B:DF:93:F8:69:7E
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584B62103A55C2A10E6006CD81F0
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa
Signing time:             Thu 02 Oct 2025 01:29:37 +0000
ROA not before:           Thu 02 Oct 2025 01:29:37 +0000
ROA not after:            Wed 31 Dec 2025 02:29:37 +0000
asID:                     401362
IP address blocks:        216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.85.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.91.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:10:3a:55:c2:a1:0e:60:06:cd:81:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Oct  2 01:29:37 2025 GMT
            Not After : Dec 31 02:29:37 2025 GMT
        Subject: CN=bbc52656-9cdf-436e-9c9e-6dd619ad151c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:b7:af:70:60:f3:d6:99:21:bd:08:7b:74:
                    b6:4c:60:99:96:47:65:25:f9:ad:c4:a0:93:9e:8a:
                    61:ec:0e:18:71:80:1a:ba:39:dc:cb:1b:3e:c7:19:
                    18:b6:53:5f:3a:54:83:12:73:ac:a6:c0:60:9a:69:
                    2a:a8:37:11:33:ea:94:9d:c2:68:74:2b:a4:b9:d2:
                    4c:61:6d:7c:cb:ff:6a:dd:05:aa:9a:92:8b:ea:f6:
                    4b:68:13:5b:10:9e:7b:96:5d:a9:79:8e:bf:f0:05:
                    43:f3:6b:0c:1a:c3:75:e6:d7:6c:dd:75:49:5f:7e:
                    95:48:fe:b3:d5:db:e2:7e:97:bb:c7:71:c0:78:23:
                    90:69:dd:18:fd:e6:ee:eb:79:18:3e:59:f5:a9:2d:
                    02:ee:b4:39:aa:6f:b4:54:7f:99:10:95:20:25:5d:
                    0b:60:12:2c:8e:df:2c:f5:d3:d6:a8:d5:b6:03:2a:
                    52:6a:19:f4:c4:7d:90:ab:ec:3b:c7:17:50:5e:68:
                    20:a8:01:f1:54:80:0b:2d:3c:15:44:2c:dc:b7:cb:
                    53:b9:c9:82:2d:88:b4:f6:ad:66:57:f2:d8:75:b8:
                    b4:02:14:dd:9b:e1:c4:09:d1:e4:99:3b:d7:50:0f:
                    4e:73:c4:c7:d1:3d:0f:96:e8:ac:07:4d:78:30:e2:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:CE:DC:1A:48:02:7D:27:0E:FC:9F:74:55:2B:DF:93:F8:69:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.75.0/24
                  216.150.77.0-216.150.78.255
                  216.150.83.0-216.150.85.255
                  216.150.90.0/23
                  216.150.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:9e:81:7f:26:df:76:df:30:30:2f:53:ca:f4:60:41:41:
         c3:d3:0c:4f:4e:9f:e0:92:4c:4d:c8:bf:92:a3:40:52:7d:87:
         65:b1:25:86:b2:85:60:f3:e8:91:e2:da:32:29:02:5d:ed:50:
         4f:19:5d:09:49:dd:a6:4f:56:17:0a:38:f5:d8:b0:25:58:59:
         ed:ad:8d:f7:c6:a5:ea:08:c4:6e:d0:2f:59:c1:19:20:ee:0e:
         2d:f3:58:43:c1:91:a3:d2:28:78:88:2f:76:e5:80:d6:be:82:
         6c:d1:96:96:5d:dc:e0:40:40:ba:08:c1:c2:2e:0a:af:75:e8:
         f1:3b:b9:46:fc:e9:f8:0a:5c:c5:18:35:9c:cb:f5:22:60:8c:
         75:66:eb:89:20:a6:46:90:d2:96:27:5e:92:8a:8c:e8:2f:24:
         61:aa:ee:d7:d2:fb:57:bd:73:58:c3:31:48:24:65:44:60:08:
         e2:43:dd:47:40:de:50:8b:04:4c:db:96:8a:f9:50:33:4f:43:
         3c:c0:0e:1b:b5:26:68:ce:89:4f:40:5e:40:25:d2:56:a6:be:
         f9:c5:bf:a1:bd:33:93:5f:c0:70:78:ab:f1:f4:9b:b2:c3:79:
         fd:d4:93:34:7e:e5:42:ed:28:4e:07:c8:af:f1:a2:33:79:7d:
         b6:d3:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:38 2025 by rpki-client