Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa
File:                     dfa8b6ce-1680-38f8-a585-90d820aa228f.roa (raw, json)
Hash identifier:          g/pTR6l5KB1zYliLM3BxSwxK6XX08U3mIqx3fBDH5eg=
Subject key identifier:   34:D7:7C:DD:2D:8F:A7:FA:28:15:D1:D3:D7:4D:FF:9C:CD:6E:C4:1F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38B161C06CEFA3BC19454B60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa
Signing time:             Tue 17 Jun 2025 13:03:26 +0000
ROA not before:           Tue 17 Jun 2025 13:03:26 +0000
ROA not after:            Mon 15 Sep 2025 13:03:26 +0000
asID:                     7029
IP address blocks:        192.171.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:b1:61:c0:6c:ef:a3:bc:19:45:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 13:03:26 2025 GMT
            Not After : Sep 15 13:03:26 2025 GMT
        Subject: CN=c8bd6df5-e7ab-4f48-8bef-c84dd4074c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:b6:0e:d1:77:ed:7c:c7:1d:88:73:57:cf:
                    61:58:8d:ed:b5:e1:b4:65:5c:5b:88:a2:c0:83:75:
                    11:a5:51:26:c1:cb:db:6d:33:32:ed:9a:d4:b5:73:
                    08:be:83:95:d5:23:4a:74:06:aa:7f:2c:7d:a3:d4:
                    01:b1:d0:bc:50:14:3f:87:08:25:b7:d5:c1:18:93:
                    1b:3c:06:c4:30:40:dd:f2:20:f1:30:cf:dd:fb:a4:
                    65:a3:df:e0:bf:59:47:db:eb:ba:1c:19:34:bc:29:
                    b3:3c:a9:74:d0:1d:19:6e:bd:3c:e1:2c:85:05:ab:
                    3f:39:09:65:55:bf:a3:76:c9:59:48:61:ec:c0:80:
                    94:d5:7b:7a:93:2c:80:53:9c:3e:97:3b:24:ec:7e:
                    b9:be:de:59:a4:90:69:55:02:44:90:58:db:5a:78:
                    14:cd:e9:3d:63:6b:ff:62:37:5b:82:af:5d:ec:b7:
                    ac:12:40:8c:e2:35:cf:0b:c1:49:b7:d7:99:05:d6:
                    04:f8:07:6a:fe:fe:5a:43:0a:97:3f:ce:15:4a:46:
                    89:cb:a2:bf:94:cb:fb:6c:6d:bc:e3:da:41:b3:a1:
                    d0:56:78:e0:7e:e7:15:cb:ee:a8:79:a1:4d:97:3f:
                    58:79:ae:9b:f3:23:35:79:77:3c:bf:53:0c:fe:7e:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:7C:DD:2D:8F:A7:FA:28:15:D1:D3:D7:4D:FF:9C:CD:6E:C4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa8b6ce-1680-38f8-a585-90d820aa228f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:a2:66:12:57:7f:f7:72:61:18:f5:d0:1b:f5:d1:b0:c1:77:
         0d:83:05:ba:5c:af:ad:bd:e1:b5:91:99:87:25:a9:9f:c5:05:
         fd:91:96:3c:f0:72:4f:f0:29:15:76:0e:bb:47:13:b7:c4:ee:
         1b:a0:8c:84:78:0f:26:e4:d4:9f:0a:74:47:91:85:de:80:33:
         95:ff:0c:53:cc:17:cb:b5:c4:ed:b0:5c:7d:8b:74:50:62:6b:
         30:8d:fa:2f:b3:dc:76:4b:08:14:0b:2e:95:02:bd:de:1b:92:
         1e:93:61:90:7d:6d:16:d4:21:13:65:f4:3f:3b:29:25:af:21:
         0c:a8:d5:be:6e:60:07:e6:86:5b:c1:da:d8:bb:c7:de:ad:48:
         6f:0f:65:c7:3d:9c:ae:e2:64:42:d4:cb:0f:10:ee:7b:45:6a:
         3b:9f:34:b0:5d:7a:e5:29:6b:0c:36:63:f5:4c:a5:2e:c2:a8:
         93:79:34:87:d6:f5:f4:c8:96:0a:16:83:e5:32:f3:92:e8:75:
         2f:4a:21:2b:83:9f:53:f7:dd:e6:2c:a3:94:8b:34:7d:90:50:
         90:ba:40:37:08:01:50:14:df:56:0c:b9:c7:53:17:22:c3:18:
         ed:ac:24:7f:61:96:3a:4d:2a:cf:fc:ae:92:42:c9:9e:a9:eb:
         4d:bf:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:09:12 2025 by rpki-client