Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
File:                     a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json)
Hash identifier:          2118w9yNo4W37IOG1ya++QpmYhubpugkZTuGE7m/YKU=
Subject key identifier:   C4:C3:11:4D:54:34:80:94:6E:A8:BE:DA:61:ED:50:73:05:18:10:35
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F4328584B5B0748504664852AA2868C00
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     6079
IP address blocks:        209.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:48:50:46:64:85:2a:a2:86:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=de56c558-234c-45cb-a8fa-4fc8801ce138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:46:d6:91:d4:d4:fa:be:ff:3e:38:85:23:
                    ee:6e:af:1d:36:c8:2e:67:a8:f1:06:21:f5:a7:a7:
                    f7:14:64:00:ef:09:15:96:9e:1d:86:cb:cb:cd:3d:
                    3e:22:f6:15:ba:ed:70:9f:5b:f7:af:44:5e:48:4f:
                    9c:98:8c:c4:3f:78:d6:f2:56:9d:4c:81:8f:b1:ca:
                    48:aa:ac:68:18:10:88:28:39:cc:f4:7d:b3:ea:65:
                    be:5b:90:55:e7:88:73:f5:0a:e3:70:b9:31:65:9c:
                    db:48:6e:05:ea:d2:57:9b:81:0d:e2:84:94:fe:d5:
                    0d:5b:ce:64:8a:a7:36:4f:51:53:40:56:a8:a0:a3:
                    98:38:1e:f7:c4:c0:3d:7f:72:74:65:3b:15:5d:4e:
                    13:94:67:35:5e:18:dc:c8:c3:b0:4b:c8:9c:d4:5c:
                    27:11:a5:9f:c7:ba:60:ca:a7:74:ea:39:d7:17:9b:
                    96:0c:a3:52:35:61:3f:f4:ae:fd:b0:36:7a:c6:c5:
                    77:c0:c2:69:9c:e2:2e:bb:3d:be:48:7e:74:ff:d3:
                    41:c2:39:bb:1b:d0:d1:82:21:e3:3b:f1:61:39:29:
                    1f:fe:c0:e4:6d:30:4c:61:5f:e8:db:c7:52:df:dc:
                    61:83:86:b4:f3:b2:be:f0:98:0a:6f:50:ff:7a:49:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:11:4D:54:34:80:94:6E:A8:BE:DA:61:ED:50:73:05:18:10:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:96:1f:ea:26:6d:42:31:00:88:0c:61:91:7e:31:88:31:
         3d:cf:7c:62:b0:0e:f3:7a:a6:a2:33:fd:c8:9e:ad:34:72:16:
         3b:15:e0:d1:5c:3b:b7:f3:09:ee:40:39:1a:2f:7f:e4:95:f9:
         5a:80:f2:c3:5a:aa:30:55:36:37:0b:d0:a3:f2:ee:6b:12:32:
         37:d9:86:76:c2:de:b9:2b:6f:e4:f0:5c:6c:08:da:4c:98:f2:
         11:95:e4:9b:17:ce:ee:b5:d5:c7:8c:4f:38:ae:fb:1d:48:06:
         1e:06:43:30:20:8e:4f:19:99:8a:b0:8b:97:59:96:61:0b:3a:
         a0:09:f0:7d:1b:3e:5d:30:3d:24:c5:57:50:85:46:80:aa:79:
         44:2d:d1:31:77:b3:67:74:7a:5f:d7:d7:14:2d:8d:3e:06:9c:
         27:42:b2:78:11:d1:e0:f8:b9:7f:19:21:c8:98:fb:ff:bb:af:
         53:ef:8b:b2:3d:7e:f2:f8:92:87:29:a5:1b:1f:e2:77:4e:9f:
         4e:41:d1:56:81:49:73:ea:be:c9:91:ef:b1:ec:a9:b3:7d:97:
         27:e8:04:71:d0:42:86:c2:10:04:97:16:bf:d4:6b:4e:e1:dc:
         08:f1:79:04:a4:02:3e:a7:f5:b0:11:e1:43:57:4c:60:c3:ab:
         46:26:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:12:21 2025 by rpki-client