Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa
File:                     10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa (raw, json)
Hash identifier:          NOyfXHjs//f1HZA12CJBCsKSDKoVuCs2LbdOGRDfwc8=
Subject key identifier:   0A:CD:FE:70:EA:20:7F:54:98:D9:1D:5A:24:FC:83:30:5A:71:F5:6B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B047C16BE6A452BC8B1CEC100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        199.250.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:16:be:6a:45:2b:c8:b1:ce:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=07cb2f78-bc1d-49cd-8eae-a6d21f2401ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:4c:13:d9:71:f1:01:cd:d2:cf:5a:fb:24:
                    ef:9a:26:ad:2b:a6:a7:94:cc:05:c7:0b:37:7a:e7:
                    42:04:39:d1:b3:4b:1a:fa:2f:48:d3:ff:d0:6d:ef:
                    e0:2d:7f:ff:73:9c:98:e3:ea:c0:88:77:cd:4f:f0:
                    cb:aa:42:ec:02:5b:ea:41:b9:90:5b:8c:5f:92:83:
                    38:c8:b1:48:cc:d9:c1:d3:49:30:f1:91:2e:13:9f:
                    01:dd:00:41:21:38:cc:10:0b:94:87:2a:ea:15:35:
                    99:77:3c:55:7c:bc:2e:c6:a1:58:4c:b2:4e:a0:16:
                    cd:7c:45:2d:de:0e:12:d2:e3:7b:05:aa:cd:f7:ab:
                    aa:9c:a5:6b:31:06:10:c0:f2:d5:6c:13:30:d4:34:
                    03:da:cd:4b:31:f3:2a:35:c5:a8:3e:b9:12:0a:af:
                    66:67:4a:ef:20:92:76:cf:b1:a2:f6:45:7f:89:ba:
                    77:ee:c8:c7:db:11:4d:b6:ed:1a:7d:b9:2d:7a:b8:
                    10:30:fb:4d:8b:a6:b3:04:4c:21:9a:30:f8:78:c2:
                    1a:42:f6:58:91:09:c9:59:ba:1d:52:8b:87:53:a8:
                    25:50:6b:d2:7a:b1:3f:05:32:74:d2:d8:b4:43:97:
                    22:06:76:1b:71:4f:16:f7:09:2d:7f:8a:e4:5f:89:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:FE:70:EA:20:7F:54:98:D9:1D:5A:24:FC:83:30:5A:71:F5:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10dac507-c90e-3df7-9f1f-8a0ee4a266ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fe:25:35:b0:53:dc:7e:6e:5f:10:f4:9a:ad:c5:04:33:3e:
         af:35:99:4f:e0:25:d7:9b:e0:d7:6c:b2:bc:09:e7:4d:6f:19:
         66:36:8f:dd:58:38:7f:ec:d1:73:da:67:30:f4:44:f8:f9:a2:
         4d:0d:0c:7b:5b:76:17:49:a3:5f:94:b8:7f:88:82:98:a2:a9:
         38:c9:ae:67:5b:9c:5b:3e:12:82:57:a2:69:06:d3:74:a0:46:
         45:b6:e2:43:3f:03:9e:8d:5a:22:66:61:b3:b4:53:90:61:c1:
         e9:9e:3a:38:35:46:e8:33:a2:b1:d4:e2:59:90:c5:6c:cd:ea:
         50:ef:0c:ea:df:0a:f9:de:2e:4f:7d:70:10:77:bc:ec:32:93:
         e7:95:d2:e7:4c:42:b8:c1:60:ee:05:bd:b0:8a:47:25:f7:67:
         9a:83:c8:35:a0:81:47:c1:dc:99:6f:d9:3d:35:6a:50:91:d6:
         f1:99:bd:4e:50:fc:86:bc:ee:ae:79:8d:7e:92:23:1d:b5:af:
         9e:82:f5:cb:fd:9d:50:b3:8b:85:df:6d:af:35:2a:a6:45:53:
         0f:7a:0f:cd:05:46:98:73:19:70:a3:17:ba:a7:8d:b2:ee:43:
         13:e1:ab:f4:44:2b:47:a5:79:bb:b5:08:b7:97:f0:fb:4b:10:
         72:e8:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:29 2025 by rpki-client