Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa
File:                     111c58ff-eba5-3178-9d43-31030473aee7.roa (raw, json)
Hash identifier:          Tp6JkK67Tv0wYHnVgF/7nUwc64IwCzTeJRWsZ+ktYn0=
Subject key identifier:   D8:EB:0D:2C:C4:2E:D1:72:F3:6A:C7:3B:EE:5D:DB:EC:88:C4:6D:8C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2761808E4C314D0347098000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        209.251.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:80:8e:4c:31:4d:03:47:09:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=288ec285-bc48-42e2-bbc4-f572c8fb4674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:9f:86:43:1f:34:9b:29:22:cb:2f:d7:ff:
                    96:09:ef:13:d7:dd:ea:50:74:25:fa:06:2e:2f:3b:
                    6a:61:d3:10:ba:38:61:8d:f1:41:7a:3b:1a:9a:8e:
                    72:58:d5:96:b3:31:84:f5:96:0a:92:e5:2b:72:c2:
                    46:14:b9:a2:ef:14:73:42:20:37:51:1a:ed:8b:35:
                    35:73:d8:76:21:e1:93:b2:f0:15:16:cf:50:71:6e:
                    91:64:ee:21:be:78:98:01:0a:52:64:29:ad:35:a3:
                    42:ac:96:01:f6:c8:e2:56:85:89:d2:ad:0a:c0:a3:
                    8c:6d:a0:2a:1c:17:f5:bc:44:4e:1e:34:ef:a1:5a:
                    fc:79:10:fb:2f:34:6d:95:64:a0:db:c7:c3:73:b0:
                    53:ce:c7:90:78:18:fa:7e:4c:cf:24:6d:17:c0:d6:
                    63:5b:8e:d7:f2:a5:0e:bd:cd:9d:61:4f:45:70:6f:
                    1d:57:64:9e:49:2a:62:7a:be:ba:cf:27:76:83:ab:
                    21:37:ea:45:2e:89:f3:1f:c7:be:0d:53:5f:01:bf:
                    24:0d:c6:4c:b3:d1:a1:00:71:fc:67:a4:a6:b7:d4:
                    e5:2d:85:c5:ca:51:1a:72:98:b6:27:bb:48:47:1e:
                    32:08:56:35:17:74:27:2c:a0:b3:ce:ed:73:29:eb:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:0D:2C:C4:2E:D1:72:F3:6A:C7:3B:EE:5D:DB:EC:88:C4:6D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:ff:93:57:22:c7:0b:a4:f3:cb:59:02:90:d3:a5:51:0d:
         fd:76:73:a3:49:9b:63:90:df:07:38:ec:64:82:d0:ec:47:41:
         42:c9:fc:8b:53:63:97:96:fc:9c:d4:d2:3a:a6:9d:cf:36:0b:
         9f:bd:63:c2:4a:55:13:fa:89:55:71:96:a6:f4:43:be:9d:5c:
         ad:4e:a9:fc:51:51:0b:d4:5e:98:e2:fc:e7:22:c7:78:24:90:
         ab:88:3b:fe:79:48:de:18:b8:cf:3d:93:8b:d7:36:71:fb:82:
         b8:ff:29:05:14:77:68:bd:a3:d3:b4:d3:2c:20:33:36:d7:63:
         63:7a:ad:9f:2e:ec:bd:91:eb:0c:ba:03:5e:2c:45:91:aa:7f:
         ce:b4:04:df:20:6c:3e:8c:04:07:4d:81:ed:0c:63:34:96:9b:
         6c:1d:3c:58:19:42:6c:e8:5e:30:33:8d:d0:c2:12:27:90:92:
         88:f0:65:49:7b:61:c6:00:a1:d7:f9:b1:52:f6:5e:d2:8b:77:
         20:6f:fe:e6:0e:58:cf:14:2d:fc:e3:05:f6:d1:1f:12:94:67:
         0e:16:43:52:3f:92:91:9f:73:ac:d7:4b:d0:8f:8f:42:c2:14:
         10:4f:3b:4b:e9:23:4b:f7:02:4f:d9:4f:01:79:a6:95:29:fe:
         11:be:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:02:23 2025 by rpki-client