Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa
File:                     4116e98b-72e2-3f3b-9506-948edabc5cb7.roa (raw, json)
Hash identifier:          TYDGy8vRtdRMJiGSzvkTYwadQN2TLzJ5uOSiYtg8IPw=
Subject key identifier:   54:A9:A4:C6:58:39:1E:EF:E7:96:2F:E8:B5:9A:BC:87:74:BA:9F:79
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584AFEE69DF29832A028837CF800
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     393225
IP address blocks:        199.212.0.0/24 maxlen: 24
                          2001:500:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:9d:f2:98:32:a0:28:83:7c:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=5a78595b-f7c7-40a1-9a49-1e183acd48c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:12:92:21:55:c3:be:28:af:73:87:9c:fe:
                    3b:c6:ff:16:a5:7b:5f:4b:df:ad:e4:d1:62:5c:d2:
                    39:c6:d8:58:04:c6:8f:62:5c:a3:83:27:3e:56:da:
                    50:3e:a8:4b:d2:e6:61:57:ef:61:8b:49:19:aa:b0:
                    12:93:c4:3a:5d:59:5c:40:86:a5:6b:4a:09:28:63:
                    bd:53:bd:cc:91:e8:7b:2a:bf:62:ea:fd:62:be:5c:
                    45:6a:53:46:b0:f1:98:d3:aa:58:ef:d8:47:5a:bb:
                    fb:13:51:69:6b:e9:0e:e5:9c:da:e5:86:9c:f3:a8:
                    91:bf:b4:36:7a:f8:67:90:71:f6:56:7a:46:e4:58:
                    0b:9a:db:f0:ec:ba:5f:bb:6e:a4:c4:19:90:eb:78:
                    70:4c:ea:29:0b:8b:d9:fa:6e:a6:ea:a8:8d:67:ee:
                    76:e8:ae:3f:44:d3:cc:f7:52:4f:9c:c6:9d:46:ae:
                    f9:f5:48:b7:49:d5:94:26:34:37:28:7d:1c:43:3f:
                    18:49:45:74:16:68:2d:09:23:bf:60:59:38:fa:3a:
                    e8:2c:6d:98:26:c5:63:15:f7:6a:e0:d5:f2:f4:df:
                    f8:4c:12:93:6f:87:ce:f2:33:c4:dd:90:76:22:55:
                    95:29:cf:c6:ee:bb:d6:f2:7f:c7:65:38:0a:f8:ef:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:A4:C6:58:39:1E:EF:E7:96:2F:E8:B5:9A:BC:87:74:BA:9F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.0.0/24
                IPv6:
                  2001:500:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:85:b7:c4:c0:6e:32:7e:c8:eb:ce:f4:1e:47:eb:a9:c3:4c:
         9c:ef:9c:8b:b2:e3:84:ab:74:cb:36:49:59:36:bd:f3:06:8b:
         22:b0:27:f2:95:ab:bb:64:4c:75:82:90:1b:78:19:7f:37:7a:
         5c:66:f8:f8:3b:34:9e:6e:09:c2:73:3f:0d:2a:f7:9f:33:c7:
         55:23:e8:b7:00:6f:47:e1:ef:62:73:ed:57:c7:ea:15:17:8c:
         d6:9f:80:99:35:0f:b8:61:08:93:e9:dd:b8:63:43:d3:2c:9f:
         cc:a3:f7:90:09:77:f8:97:3c:a5:ed:f2:f7:77:eb:c1:90:09:
         e6:1b:28:89:94:3e:08:ab:ef:2a:64:15:99:fb:73:61:94:dd:
         aa:e9:7b:9b:32:6f:19:c0:95:b6:ff:b5:9a:c9:72:96:14:c8:
         1b:09:8a:d8:17:c5:b5:7d:42:ec:a9:48:76:a4:00:7c:0f:5f:
         02:df:c7:f3:c3:6d:fb:6d:5c:21:7d:d8:86:d9:a5:e8:8a:77:
         09:94:ab:db:b9:d9:ca:b7:8c:76:9f:23:07:6f:7d:20:c5:21:
         ee:64:35:ed:97:3a:c1:46:1c:ea:a5:42:7d:5a:21:98:af:f9:
         e7:00:97:80:67:06:ca:3c:c2:00:2d:b6:fd:de:7f:9d:1d:0d:
         c8:62:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:01:02 2025 by rpki-client