Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/16b385ec-598f-3ec3-9dac-1112734569f2.roa
File:                     16b385ec-598f-3ec3-9dac-1112734569f2.roa (raw, json)
Hash identifier:          kbA/Aea4eaQuTwhoXr7U5Iei3aQ6rbgDdXtMx3Hvz5g=
Subject key identifier:   3F:7F:BF:C6:38:E2:4C:B7:27:F7:99:0E:FE:1B:56:64:4A:EF:89:DE
Certificate issuer:       /CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f
Certificate serial:       010D0C9F4328584A9FFB92AE1F726A93D0544980
Authority key identifier: F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/16b385ec-598f-3ec3-9dac-1112734569f2.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     63297
IP address blocks:        192.243.214.0/23 maxlen: 25
                          2605:cf80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:92:ae:1f:72:6a:93:d0:54:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=dec3c0d4-94f2-4121-aa6d-ab28617f8cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:c3:af:80:f3:63:c7:ce:34:8d:84:30:ea:
                    b8:7a:8b:87:68:9d:bc:14:8d:6c:80:0a:98:d9:d2:
                    24:84:71:e7:0e:db:ba:43:df:20:c6:ff:e0:c5:48:
                    c0:23:f6:40:bf:23:f6:85:4f:69:ec:22:aa:c3:1c:
                    29:05:09:5b:0c:88:60:ef:fe:9b:ec:63:d0:69:4f:
                    25:ec:f8:9a:78:23:ca:9e:f2:b5:22:60:05:18:f3:
                    8b:7e:f4:c1:bb:7c:d5:3c:63:7f:12:bc:78:26:8c:
                    5a:3d:60:eb:72:ea:a9:f4:17:57:6b:3f:f4:aa:9c:
                    32:19:fa:9a:d1:3c:bc:f9:48:01:7a:1b:a8:40:fa:
                    01:37:1b:c0:54:4f:74:11:ee:d3:38:c6:c3:98:65:
                    41:dc:02:e5:09:4c:21:84:ad:56:e8:59:36:a0:e0:
                    af:e6:b0:44:50:0c:6b:cd:d5:9b:3d:fa:14:fc:c0:
                    88:85:0e:0d:e0:58:f3:15:ab:e2:c1:03:7d:04:fc:
                    b1:cd:ae:87:d0:a1:fb:d4:2b:4b:f3:0b:e6:5e:d4:
                    a0:cb:23:68:39:61:51:18:4f:8f:f6:05:b2:e1:fc:
                    07:b8:97:64:9d:59:37:85:59:1b:70:9a:9b:8e:2b:
                    12:e0:9c:7d:ed:5f:ea:80:0c:a7:03:e6:45:4e:7c:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:BF:C6:38:E2:4C:B7:27:F7:99:0E:FE:1B:56:64:4A:EF:89:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/16b385ec-598f-3ec3-9dac-1112734569f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.crl

            X509v3 Authority Key Identifier:
                keyid:F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.214.0/23
                IPv6:
                  2605:cf80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:be:d9:c1:61:ec:1c:f4:d8:0a:4f:3c:52:d2:d4:ae:37:f6:
         34:39:bf:10:47:55:8f:a4:3f:77:cc:2d:3c:04:f4:ea:ed:81:
         cb:ac:4c:1b:b2:42:a8:89:0f:38:e3:c0:79:00:eb:36:5f:6e:
         cd:15:3d:24:ed:e6:11:48:17:63:e0:f2:de:35:51:4d:57:71:
         9a:d3:ad:1b:b3:4f:00:88:9d:0c:1d:6a:ce:23:4a:6b:c1:74:
         39:6f:09:41:c9:ca:61:69:1c:cd:fb:7b:ae:8e:f7:21:41:b7:
         9d:3f:28:5a:cc:30:c0:a5:f2:69:40:17:ed:a1:d1:b3:22:04:
         88:38:0f:4e:2b:90:cd:be:44:fc:7e:2e:61:70:6d:90:47:4b:
         21:13:42:51:84:51:61:a4:07:3b:4b:22:38:4e:aa:c7:11:89:
         11:ae:cb:29:c2:15:97:4d:fc:29:54:9a:92:99:fd:7c:dd:93:
         72:44:20:8e:ae:ab:8f:57:2b:3b:2d:cf:31:53:12:3a:03:18:
         62:5d:02:a5:76:c1:71:6a:fc:57:18:c7:b1:b3:c2:77:69:45:
         df:68:30:4f:9a:45:27:89:e4:4f:53:88:60:c4:4c:75:61:2a:
         12:e5:ab:3f:77:37:d8:4c:40:16:30:55:15:6c:ff:4e:59:ea:
         08:11:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:52:18 2025 by rpki-client