Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/117f7ede-8cf3-39af-90dd-74927a96060f.roa
File:                     117f7ede-8cf3-39af-90dd-74927a96060f.roa (raw, json)
Hash identifier:          MfNwbbVbbo6khJ3YZ17iC4bWdKSvc6+4gVhYgMFtdAo=
Subject key identifier:   74:F3:FE:7E:2D:96:20:FB:AF:41:A0:58:C4:FF:0A:6B:C6:F5:13:6C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE283543A6CDF5E2A147E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/117f7ede-8cf3-39af-90dd-74927a96060f.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        216.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:83:54:3a:6c:df:5e:2a:14:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=414f3860-67e9-45f6-aa32-5a27c9d447e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:97:e9:06:2f:3d:43:46:06:b1:71:ee:46:
                    b9:29:4c:b9:45:4b:34:bb:9e:d6:40:ec:69:c3:cd:
                    5b:ab:cd:2f:6a:cb:49:18:ff:6d:8b:a3:2f:fb:6f:
                    87:79:f4:e3:00:69:86:8f:be:1d:f7:b8:40:84:f5:
                    9a:18:d3:87:e1:99:cb:1c:dc:dd:9b:75:34:64:e6:
                    bc:4d:c4:3d:44:f4:fb:31:1b:bc:3e:7a:37:23:d3:
                    ca:df:ae:6a:f5:4f:ba:13:07:27:be:31:bd:14:3b:
                    b4:ee:2b:7f:56:0e:13:13:27:60:08:76:37:fe:b5:
                    93:cc:b0:be:36:d7:a0:3e:56:a3:ac:96:32:03:3c:
                    5c:54:58:b8:61:7d:15:d5:b3:75:73:4a:89:f9:f8:
                    10:7c:bb:4d:1b:9c:df:6f:ed:8f:4d:b9:3c:27:30:
                    89:13:78:60:44:15:b8:5b:17:ba:48:37:54:43:21:
                    c7:32:8e:64:14:09:20:eb:17:ff:56:41:ad:dc:9e:
                    cc:65:88:00:c0:22:bb:2d:5f:09:3d:0e:ca:bb:62:
                    0b:49:04:8a:6d:84:81:cc:c7:f6:78:13:a0:ae:85:
                    ef:f3:59:7d:69:1f:36:09:f6:dd:b7:ee:af:14:03:
                    e9:48:98:52:1a:94:aa:9d:74:1c:d1:21:78:40:17:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F3:FE:7E:2D:96:20:FB:AF:41:A0:58:C4:FF:0A:6B:C6:F5:13:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/117f7ede-8cf3-39af-90dd-74927a96060f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:20:a0:52:bf:97:55:47:04:f1:0e:aa:c1:d5:fd:d8:84:
         7b:80:d0:a2:ef:bb:ae:7a:1e:e5:48:f8:15:fe:2f:15:1c:d7:
         98:3b:ba:a7:2f:5b:8e:e2:59:ff:65:6f:66:16:8b:d2:33:2a:
         bc:9a:f0:b4:a8:3e:14:65:85:6e:aa:4f:e4:55:11:a6:ab:cf:
         20:99:94:5e:2a:e6:39:be:f1:61:4b:26:cc:d9:7e:99:a8:c4:
         38:5e:13:cd:f6:3e:6e:0c:cc:f9:6b:99:e9:62:49:a9:42:fd:
         32:24:99:dd:a5:0b:ed:41:e3:59:bd:bb:0d:7b:ef:74:4f:58:
         f0:f4:f0:74:db:2c:32:53:be:a0:38:28:3f:d7:fa:2f:19:3c:
         1a:3b:fb:10:6a:12:4f:b2:de:21:b0:e3:11:98:3d:a4:a0:1b:
         21:1e:ff:09:20:15:51:a2:5a:33:92:24:7d:9c:3a:a2:68:e0:
         f2:a6:29:b9:52:78:ab:63:4d:0f:7d:e2:71:84:cd:95:d7:b1:
         fa:a3:82:8d:a1:fd:15:bf:f9:c3:d3:62:0a:80:3a:22:3e:48:
         6d:2a:04:63:79:e5:d7:9b:a9:63:6a:23:f8:ee:aa:82:68:5f:
         5b:eb:fc:e4:3e:d6:2b:e3:96:41:f5:22:e6:dd:65:34:b7:c4:
         69:c8:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:36:55 2026 by rpki-client