Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa
File:                     105a04e3-5d90-3049-8f72-c4c717595af4.roa (raw, json)
Hash identifier:          XXgAou6rSRjq9AnOqVuyIVmkg2/MnxahDXIbwm3BLVQ=
Subject key identifier:   B9:DE:1A:B0:11:2E:07:34:6F:7D:49:5A:A0:B1:65:42:D3:BC:9A:B1
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B36BC49AEF8A71A732B7E9288
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     26480
IP address blocks:        199.202.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:49:ae:f8:a7:1a:73:2b:7e:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=d2c66da5-41d2-4e58-8a64-5cf17fd006e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:b3:37:0a:2e:c2:49:60:dc:31:84:01:d4:
                    b7:27:9a:f6:e8:dd:1b:1a:1a:dc:0a:4a:51:93:8c:
                    ee:9a:ef:1c:da:7b:88:0d:94:da:ec:81:4b:99:09:
                    7b:d0:e8:f7:77:da:be:4a:f5:da:77:b7:71:1f:5f:
                    8e:0f:89:13:90:92:30:9a:7d:ea:ea:59:0f:5f:d1:
                    2a:e2:e3:b1:48:42:9a:41:17:4b:b1:ae:22:ab:13:
                    48:81:3b:24:6c:33:f0:b5:20:ca:9b:28:98:07:06:
                    63:7d:70:b3:38:6d:d0:d0:a3:a9:6a:af:08:92:81:
                    0b:67:7a:75:a7:5c:01:53:ff:58:3b:3e:34:ef:a6:
                    80:b3:6a:d2:8f:00:5e:ca:aa:4f:c7:94:b8:f7:3c:
                    5d:f9:da:a1:d2:5e:0f:7a:58:ef:ff:d1:22:b0:d9:
                    d4:78:5e:2c:e0:44:d8:73:51:63:71:52:fc:57:dc:
                    29:be:fb:2a:5f:41:0a:32:58:91:28:a6:5e:82:73:
                    df:27:42:c3:c3:64:24:16:c5:72:f8:63:1d:e1:44:
                    52:4c:b0:c4:a6:86:2d:1d:7f:84:96:e1:6b:cd:a0:
                    90:3c:04:8c:76:f9:c5:17:da:3c:f8:91:5f:e1:a6:
                    3b:b2:68:e7:ba:68:74:1e:81:0b:0a:1d:7e:18:32:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:1A:B0:11:2E:07:34:6F:7D:49:5A:A0:B1:65:42:D3:BC:9A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/105a04e3-5d90-3049-8f72-c4c717595af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:44:df:7d:37:d1:1e:1b:11:46:94:e7:27:fb:ec:ec:d5:82:
         73:50:4a:2a:40:5d:00:9b:eb:52:b2:d2:4b:d2:de:f6:15:30:
         1d:d4:82:ef:68:58:f7:bd:45:d2:b4:3f:52:f9:ce:25:39:0f:
         b9:49:0c:01:d8:1c:ce:9c:a5:74:f5:6b:a7:1c:19:21:9d:3b:
         b2:28:3d:4f:d9:90:d9:a0:16:17:9f:15:ab:c7:f2:7a:c1:ec:
         53:e3:09:d6:f5:46:f6:99:ee:78:ea:6c:07:7f:f0:b8:77:9e:
         92:13:5b:6f:2e:2c:eb:d0:ab:06:d8:1c:8c:c3:15:70:23:90:
         2c:93:49:3b:a3:1c:a2:56:3a:c1:76:34:94:3e:a8:dd:68:29:
         ad:3d:21:f7:4d:cf:91:d6:57:ea:51:ed:54:f6:91:25:12:26:
         fc:c7:a8:6d:90:12:54:04:6d:24:bd:ed:fa:6e:75:da:ce:90:
         c6:14:de:2a:30:d3:98:20:8c:f6:11:c8:60:56:cb:e6:54:fb:
         d4:f8:e0:07:a1:49:6d:69:ed:6d:e2:f5:13:7d:86:62:d0:c2:
         b3:b9:fa:fc:fa:a1:50:e2:45:e0:e1:e5:53:4b:f1:0d:d4:45:
         aa:21:93:d3:e5:02:b9:f4:d8:ce:cc:9e:36:01:82:1e:84:ab:
         8d:77:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:38 2025 by rpki-client