Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
File:                     ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa (raw, json)
Hash identifier:          0H175RjRfJj9zxID/RQULZanAeovxEXf+fupjCH+Go4=
Subject key identifier:   AD:18:E7:40:38:A7:9E:ED:BE:7C:E3:E7:59:A2:DF:15:93:5A:8D:C9
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B9E079E832179AFB7414F2740
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     21821
IP address blocks:        216.255.100.0/24 maxlen: 24
                          216.255.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:9e:83:21:79:af:b7:41:4f:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=6d4e0351-973a-4af2-b4d1-eb4f9a14d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:0d:44:79:81:0a:26:da:c0:fe:26:54:9d:
                    b0:7b:6c:c4:61:4a:22:2d:23:04:97:cd:f7:f9:5d:
                    dd:23:80:f7:94:4d:e9:61:5d:ac:0e:2f:43:05:4c:
                    59:2e:4c:83:33:b3:ae:e9:6a:ea:90:25:ea:59:27:
                    66:33:39:2b:33:c8:84:56:b1:02:c6:93:4c:6f:56:
                    12:fc:2b:36:23:7c:02:16:cb:c2:43:91:88:eb:6b:
                    09:8d:a2:c0:d3:d8:09:4c:94:36:6d:29:f3:61:68:
                    f1:7b:01:ff:23:88:b9:c5:c2:5b:97:43:77:28:55:
                    d7:d6:71:ff:f3:6e:d9:33:5b:18:82:bf:b4:06:a6:
                    8c:fc:2a:23:ff:c9:47:3b:a3:49:1f:78:61:ec:d4:
                    4e:d6:cf:0f:fb:bd:7d:d9:78:d5:ee:9c:b1:0f:c5:
                    29:4b:90:9d:97:75:17:4e:41:10:f1:2a:9e:75:09:
                    b6:f7:b6:c0:94:89:68:e0:f7:be:36:4c:ce:56:74:
                    39:3e:e2:65:a2:b9:fe:bd:70:9d:cf:6e:65:54:bc:
                    fc:ba:f2:59:c4:23:c2:67:9d:08:15:52:94:c7:4a:
                    1a:3b:ee:17:44:d1:c1:2d:65:d7:80:c7:60:f0:6d:
                    43:c1:0d:d0:2c:97:71:ef:73:f5:b5:39:f7:e2:d7:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:E7:40:38:A7:9E:ED:BE:7C:E3:E7:59:A2:DF:15:93:5A:8D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:65:3d:f9:70:b5:29:67:1e:3d:a1:e4:1b:f8:d9:fa:c3:37:
         de:05:c0:71:77:0e:d4:18:60:80:84:5e:d1:72:8a:c5:b4:85:
         dc:7c:f4:b8:b1:53:69:6e:64:9b:97:5b:64:6c:fb:d4:ce:1d:
         7d:6e:08:17:f5:aa:8a:77:4d:a3:b1:54:31:57:56:06:3e:50:
         1d:7d:f5:c2:d2:43:33:31:9c:2a:20:ca:18:e9:2f:d3:8f:49:
         41:ab:bd:e6:a4:89:05:49:ed:9b:a5:b5:6d:a4:2f:2d:5c:92:
         ed:06:e9:40:87:66:a3:5b:b2:03:f2:0b:f6:fe:f3:1e:d4:cb:
         4f:3c:df:cd:79:04:26:c9:de:ed:be:bd:91:c1:94:78:c4:f5:
         46:e8:8b:d5:5b:9e:bd:8f:38:72:f2:d6:85:54:59:82:bf:1f:
         e5:0a:93:e8:4a:4f:38:76:9a:2c:c4:d3:03:ec:81:de:4e:cf:
         a2:60:91:b4:17:de:18:d9:d1:cc:c2:1e:3f:44:0a:42:16:2d:
         76:de:99:dc:ed:63:03:91:06:65:87:c6:40:48:5b:45:da:54:
         48:36:a1:17:ee:cc:c9:c6:37:1f:6a:d7:e6:29:ec:65:58:39:
         e0:94:72:70:a8:1a:4f:05:e2:72:d0:16:01:f1:e5:4f:25:83:
         26:93:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:01 2025 by rpki-client