Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa
File:                     108b52f0-3e55-31e9-95fb-938fea461438.roa (raw, json)
Hash identifier:          YlgmT62nR3U7rynCHYfwXw3qn/LlcuIgtpHBnftRfF4=
Subject key identifier:   17:29:BF:35:5A:94:88:CE:46:73:16:40:D5:4B:26:30:11:47:8D:92
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F426E91D6D2D1D0A33540
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        216.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:6e:91:d6:d2:d1:d0:a3:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=f1c14211-3b35-45b1-8257-7ef630a02e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:53:ad:f0:7f:9e:00:d9:0d:42:05:ba:6b:
                    85:b7:40:2a:bc:e1:ae:8c:5d:e7:91:2f:9a:0d:50:
                    44:12:f7:7a:7a:0c:7a:c2:42:22:8f:10:0b:46:8e:
                    cd:63:55:60:67:f6:83:9e:8d:3f:54:e6:ac:b9:ad:
                    7f:91:2e:3c:cf:76:58:8a:35:7e:b9:a7:fe:9e:54:
                    d8:4b:55:c3:8a:e6:99:77:29:cb:b9:ee:a4:37:fc:
                    3c:3f:3f:e7:66:9f:c3:f7:6b:6d:14:aa:f4:ea:19:
                    b2:fe:d4:18:9d:7e:a7:5a:aa:48:51:83:da:24:7f:
                    2b:72:24:15:b8:30:bf:85:34:c3:2c:d6:df:e4:87:
                    af:4a:11:78:85:43:ec:cc:3c:86:c5:67:7c:d2:92:
                    b2:81:3d:4e:62:d5:0c:0d:81:01:6c:0d:86:c4:06:
                    15:c5:48:59:06:fc:a3:62:30:60:e7:27:67:10:9d:
                    fe:56:7e:42:60:28:df:51:95:f7:b4:7d:7d:c9:82:
                    91:9c:31:73:8a:8b:ef:1d:f5:9e:0e:96:8a:10:47:
                    2d:d8:29:df:7c:7f:a8:d4:b5:66:b9:7e:fb:c7:08:
                    e7:97:68:46:5c:16:ae:69:36:fe:43:fd:e7:a4:d0:
                    66:2d:9e:3a:57:53:76:c7:01:ae:24:a5:44:a2:ed:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:BF:35:5A:94:88:CE:46:73:16:40:D5:4B:26:30:11:47:8D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:99:70:e4:64:da:0f:4c:f1:d7:0e:8a:db:b9:68:79:a3:33:
         29:ec:85:8d:15:e5:f0:e2:e6:c0:b2:a7:00:28:65:98:93:93:
         60:d3:d8:77:02:a8:2a:ac:41:73:29:8d:56:dd:99:fa:b5:e4:
         bb:5e:ad:14:b9:0f:66:af:0c:cf:db:8c:9f:80:d7:41:6b:a0:
         62:4a:bd:fb:80:81:1e:26:f8:63:fc:ba:7b:6e:e4:ad:9d:b3:
         56:07:0f:68:6a:0c:cf:d9:85:dc:16:cf:67:44:dd:96:b6:80:
         36:cc:d5:f6:38:69:0d:96:b4:67:e6:7d:e0:a3:ee:ad:5f:0a:
         d9:f8:54:f9:1c:4c:7b:dd:45:d7:9b:dd:6d:13:df:57:90:95:
         a2:13:f9:bc:d1:84:89:b0:7f:04:b2:9b:85:28:d7:91:0c:d1:
         72:99:d6:7e:7f:bb:6c:ea:f4:66:36:11:84:0e:23:ca:d2:b6:
         6a:d6:c0:25:94:9f:0a:4e:d3:bc:7a:db:8f:f3:82:41:27:fb:
         45:f6:34:b5:f8:f6:c6:41:90:c9:bd:66:e0:91:fa:7e:f4:c7:
         8c:3a:d9:d2:6c:af:00:66:fc:b2:86:6b:f0:0e:7a:4b:b9:d2:
         3c:97:11:c0:b3:56:81:b4:2a:1e:3c:c8:02:53:6c:35:4b:8d:
         e7:09:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:07:07 2025 by rpki-client