Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
File:                     6df533e4-991e-338e-beaa-9f33d62927ff.roa (raw, json)
Hash identifier:          CXsDCXcFyaW6s2QTthOH+c5Dsrjzm37OYp1yzdefreE=
Subject key identifier:   19:E8:77:39:D0:22:88:EE:89:EE:46:24:0A:62:05:B9:60:AE:53:81
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B0A1190583A02F46C747D8E80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     64267
IP address blocks:        216.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:90:58:3a:02:f4:6c:74:7d:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=78faf55f-25bb-499c-a8a1-e9d64593893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:27:5a:6e:b3:33:30:24:a8:05:2b:3e:e2:
                    96:4a:c1:d9:56:ea:46:13:15:50:e9:d6:66:96:f0:
                    c0:0a:a0:8d:58:fa:01:e9:a7:48:a5:c5:f5:cf:d6:
                    71:07:43:22:05:3b:0d:af:3a:1a:e9:80:5a:70:c1:
                    0a:a9:7c:69:04:f5:d1:b4:f9:2b:c4:60:57:cf:d2:
                    31:90:02:7c:ce:f6:67:a5:dd:3c:0d:a2:94:c2:3c:
                    f8:30:3d:73:0f:d6:f8:7e:aa:c7:4b:15:80:de:05:
                    fa:ed:1b:39:9b:e1:7f:bd:7f:ba:7a:27:61:f9:07:
                    9d:bb:5d:48:57:55:15:51:b6:67:e7:e0:1b:20:1d:
                    18:ef:7a:0e:9a:d0:fd:30:bd:b4:94:e1:06:42:40:
                    d2:e1:dd:9e:70:cb:e5:ae:84:77:d5:10:c0:c9:5e:
                    4e:78:bc:42:5c:31:71:91:58:31:cf:f0:8d:39:c1:
                    e6:a4:6c:13:06:ad:40:66:5a:66:ec:cd:83:8a:e8:
                    72:d4:6a:82:4d:b8:2c:0f:23:b5:31:86:bf:38:d3:
                    c9:3c:d4:60:bc:7d:7a:e1:ce:6f:a2:7e:c7:33:37:
                    28:ae:d5:20:52:1f:96:45:24:c9:be:25:ce:1d:28:
                    0d:d7:62:6b:e9:6d:40:bc:41:10:18:87:d2:e9:08:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E8:77:39:D0:22:88:EE:89:EE:46:24:0A:62:05:B9:60:AE:53:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:2c:92:21:4e:d6:63:55:97:ea:cb:3f:9e:15:34:07:67:88:
         99:ab:45:ee:f5:92:83:e6:18:6e:f7:c4:47:aa:ca:b1:3b:c8:
         b8:aa:9f:a5:fd:a6:11:fb:7a:8f:f4:8e:fb:b3:d6:7f:89:34:
         c3:63:bc:27:ed:0a:5e:ef:23:91:a0:fe:d1:17:12:49:1d:98:
         9d:be:cb:58:f7:ca:12:a6:cc:41:bb:94:b0:e7:57:c3:5f:7e:
         88:0d:3b:c0:7f:01:5a:c2:c3:6e:24:67:21:15:93:e9:3e:3b:
         4e:d3:57:26:27:bf:43:70:05:de:43:b2:6b:0d:51:8c:b9:4a:
         b9:1c:41:5e:20:63:ac:78:9c:a2:60:ba:3f:e1:ce:20:3f:d8:
         97:48:3c:61:65:06:b2:08:76:43:c2:92:98:8f:37:14:0f:09:
         2d:a1:73:36:28:18:b9:f2:ac:fd:fc:6f:ed:24:4c:6c:cb:fc:
         94:2a:07:ca:d2:6e:db:87:df:29:51:d9:c4:1a:42:8c:b2:f2:
         cb:83:20:b1:62:b7:80:06:e6:83:57:af:01:0b:b3:3e:9e:80:
         d8:c3:78:4c:eb:88:fd:c6:2b:b3:22:4e:39:41:19:e7:93:f5:
         83:a2:1b:da:6b:0f:8c:70:52:2a:83:1f:82:67:b1:ef:c9:75:
         c7:a3:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:12 2025 by rpki-client