Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ea69f06-4fe3-3410-b422-af8f96211531.roa
File:                     0ea69f06-4fe3-3410-b422-af8f96211531.roa (raw, json)
Hash identifier:          gXeVCmlSw6eoVhSzDi2woolAspgfjUpXofoUKbNSVx4=
Subject key identifier:   AD:10:0F:02:79:28:9A:41:AA:05:5D:83:91:13:B3:46:08:43:3B:E7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E5E79F836209FA0E5CA8C4100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ea69f06-4fe3-3410-b422-af8f96211531.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     20001
IP address blocks:        216.213.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f8:36:20:9f:a0:e5:ca:8c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=0bf8d6ba-a57a-4933-a803-9b3b5e404019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:da:2e:d5:a5:5d:fa:96:9a:b3:c7:3a:05:
                    7f:0d:d5:76:fc:01:ae:ae:80:5d:8d:8b:7d:b3:4d:
                    8c:b3:f5:00:81:19:7f:01:8d:82:f9:df:8c:45:69:
                    f5:6d:ab:f4:3d:a7:86:bf:d7:77:34:c6:3e:e2:ba:
                    95:7d:23:56:89:89:ba:f6:35:ea:78:8e:30:02:4e:
                    6e:8b:f3:33:de:b3:18:b5:f2:f8:59:8d:7f:ea:70:
                    23:7c:cc:e3:94:fd:90:3e:62:21:63:63:e0:cb:d7:
                    ba:43:56:04:c7:3d:17:73:ff:df:2f:23:a6:93:c2:
                    41:83:18:eb:6e:b0:67:c1:d0:7c:61:c2:7c:5c:1b:
                    80:6f:54:0a:2d:64:3d:1b:85:6e:e5:ec:75:12:7d:
                    fe:91:ad:ec:e3:34:5b:2e:ce:9a:88:b1:47:e1:06:
                    41:7f:b4:10:63:89:68:45:1b:48:12:0e:82:6a:84:
                    d2:12:be:b0:4a:9f:5c:c3:24:b0:d1:d4:72:87:59:
                    a1:8a:1e:4f:6e:a6:37:22:0e:95:af:e3:3a:a3:90:
                    92:f3:15:86:dc:1b:c7:69:9a:56:a9:9e:a5:af:4d:
                    5e:11:2b:f8:0b:0e:d0:e6:91:0e:70:9d:e2:bb:81:
                    d6:b1:4f:b8:1d:9c:91:89:c7:95:45:9b:4e:ce:af:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:0F:02:79:28:9A:41:AA:05:5D:83:91:13:B3:46:08:43:3B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ea69f06-4fe3-3410-b422-af8f96211531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:4d:3c:47:33:2f:ef:77:14:e8:54:14:3a:56:a4:f1:d3:ea:
         f2:de:62:30:1b:97:a9:c8:24:3f:08:3b:17:ec:12:64:e7:32:
         42:8b:70:04:35:cf:21:89:b6:13:28:aa:bb:85:cc:10:b8:f5:
         83:e2:3b:2b:2c:db:ae:82:fb:6e:75:5b:d3:ed:99:0b:bf:e1:
         b0:a8:3d:39:19:d0:d2:21:60:1b:a5:c6:15:ec:5c:bd:45:ff:
         f6:b4:e1:b2:ca:43:5d:ba:f6:27:c5:63:01:90:d2:a1:31:31:
         5a:c3:92:ef:8d:9a:b5:1f:81:a2:8d:d5:3a:1b:a3:40:a7:0c:
         e1:04:a4:b0:cf:e3:2e:1f:99:f0:83:1b:27:45:89:68:ab:b3:
         38:c8:38:ed:4b:2f:36:03:f9:d1:fa:22:ea:6e:6d:16:28:6f:
         64:6b:1b:13:5f:d2:9d:f4:c3:8e:01:28:2f:2a:77:8f:ef:20:
         13:25:51:94:75:91:54:95:7a:d5:40:d8:9d:21:35:3a:a0:33:
         e9:29:bf:b6:41:ca:55:31:9a:b2:32:4b:dc:d6:8b:cd:2e:71:
         cc:24:88:21:fe:3e:76:d5:73:91:d8:c6:c6:be:1a:f5:fd:b2:
         2f:ad:83:f5:73:21:cd:2e:50:69:cd:00:0a:9b:16:24:7a:57:
         3a:47:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:24:04 2026 by rpki-client