Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa
File:                     d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa (raw, json)
Hash identifier:          GkDdhQFIBQB1r2LKObLQA+PWFCoEgRQdLQFAU4fj3Ls=
Subject key identifier:   6E:2A:07:1A:32:9D:57:ED:BB:71:66:09:6D:57:31:F1:08:AD:7B:BA
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B4E770FCFB257E8F95E081200
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     4181
IP address blocks:        157.212.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0f:cf:b2:57:e8:f9:5e:08:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=af403cb2-e36a-425d-beff-a2ee50a69807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:9c:36:b0:1e:b3:df:bf:32:8b:1a:dd:5d:
                    da:a8:62:17:36:f4:5b:8b:c2:7a:74:ce:8a:e9:a9:
                    c9:d2:62:f8:47:fa:84:6f:df:c9:50:30:a4:e3:e3:
                    65:0d:84:2f:b2:6d:bf:bf:91:f0:10:88:52:12:88:
                    65:07:0f:ab:bd:8d:7b:e3:bd:b4:ab:e0:96:9b:d3:
                    5a:5a:94:97:9b:07:45:bc:db:44:a5:56:15:1a:29:
                    52:86:b1:ca:dc:f3:5d:d8:5c:8a:f6:e5:43:65:31:
                    fe:0a:4e:df:28:02:68:86:a5:7e:47:2a:b8:e4:0f:
                    cc:74:9b:80:f7:a5:46:0b:84:5e:71:fa:a2:2b:e4:
                    ce:4b:20:36:1d:23:8f:3d:cd:7b:c6:f6:9d:4f:d1:
                    df:9b:23:0f:f5:9c:31:51:f5:b2:c6:c6:42:2a:6f:
                    64:da:d8:62:2a:2f:8e:4f:ce:9f:9c:b2:83:54:14:
                    6d:3d:44:1a:d2:e6:94:99:49:f7:17:7e:0f:13:02:
                    be:cd:ee:c7:02:26:39:d4:62:e6:01:96:e3:f6:05:
                    51:c0:f4:d6:52:71:f1:02:04:16:4c:33:8e:35:6d:
                    cd:94:8f:32:7f:6b:6c:30:82:52:61:05:b7:19:3d:
                    67:ab:63:5e:3f:1b:3b:80:81:bc:0f:11:a8:58:6b:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2A:07:1A:32:9D:57:ED:BB:71:66:09:6D:57:31:F1:08:AD:7B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d3bafabe-18f5-3db3-9668-3c065e6db8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:66:2b:ba:70:f2:55:95:b0:be:f9:6e:44:3f:d0:40:94:
         db:25:0d:79:32:c1:a2:58:86:e0:97:c6:a0:cb:cc:c4:33:6c:
         91:f5:52:45:c1:1b:e0:9d:e7:27:c9:33:cb:c9:ec:8c:7f:bc:
         f2:2f:d9:2c:89:88:d5:7a:28:b5:3e:24:72:95:82:5d:78:43:
         2b:a6:35:50:db:b3:7f:8e:34:40:82:06:fe:f9:cd:aa:2b:49:
         e0:62:ba:5c:d6:6b:c0:c7:5c:7b:fa:a4:98:d4:9b:fe:cd:25:
         ae:37:16:ba:11:02:f6:ea:b4:16:0d:b0:c5:7b:c1:d6:82:d4:
         bf:63:2a:ce:57:7e:55:69:05:e3:e4:8f:c4:5a:a1:ea:a1:f7:
         71:bf:40:f9:e0:13:98:85:88:14:c1:ec:04:56:9b:c8:01:b4:
         0f:39:4a:08:35:6a:24:70:82:5a:0a:f1:ce:a1:bc:09:a8:d0:
         63:56:84:a3:e5:20:ac:98:b2:92:2e:b7:55:ad:e8:75:d1:7e:
         b2:b0:33:3a:5e:d1:f6:92:ff:78:98:4a:8f:f9:e7:65:8e:32:
         be:08:10:49:1d:d2:7c:ea:3e:de:23:cc:2b:1e:fa:dd:74:f0:
         c2:a1:99:96:84:84:27:72:dd:88:48:65:54:fe:bc:c1:b7:9a:
         38:4d:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:01:07 2025 by rpki-client