Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/778012c2-1c2e-3acd-a8b5-10ec4315d462.roa
File:                     778012c2-1c2e-3acd-a8b5-10ec4315d462.roa (raw, json)
Hash identifier:          mpgJ3O8WhY4axo5BOWW1ghHlaS5z2+oAJsj+Yk6Cwg8=
Subject key identifier:   33:E9:83:00:08:8F:5F:C7:74:4B:FC:D5:78:00:CA:8A:73:D1:22:06
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B328C5D3DC56ADE6888E1EF80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/778012c2-1c2e-3acd-a8b5-10ec4315d462.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        216.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5d:3d:c5:6a:de:68:88:e1:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=b6f1ccd9-6f59-4d37-b9a4-f4aa8db42435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:3a:09:e9:7d:c9:af:35:cf:4e:e6:3d:55:
                    8e:84:f9:40:46:60:a3:5d:92:e5:67:b8:14:c2:56:
                    3a:ac:f7:ec:47:ff:e6:e6:29:77:7b:a6:a9:01:58:
                    5f:86:5c:f0:8c:3b:06:25:02:d9:ce:4d:68:17:20:
                    bd:82:e1:f2:f7:81:31:26:df:90:a4:63:56:62:d0:
                    21:cc:da:2f:52:b6:2b:9a:28:67:65:6f:44:17:ca:
                    08:29:03:34:f5:7b:34:71:c3:e1:46:79:65:ff:3f:
                    26:c9:34:2e:e6:ef:5b:fe:26:e5:1b:59:63:b0:46:
                    c1:df:8f:79:e2:39:0b:d9:09:64:50:4c:fd:7f:8e:
                    cc:b4:29:2c:cf:fc:89:44:83:90:a1:1f:77:8d:f2:
                    06:c7:07:4a:d4:fe:3a:bb:07:49:a1:15:09:d8:88:
                    e0:af:66:4b:40:90:9c:25:7b:64:82:d5:46:fb:71:
                    e9:14:1a:ae:fd:b6:bf:e7:3a:d8:b9:4a:af:ae:91:
                    66:50:0d:dd:40:fb:c7:75:1e:68:47:2c:93:0d:c5:
                    f4:39:9e:73:44:76:33:b7:3d:7d:d4:41:62:46:12:
                    78:a3:72:db:e5:a7:2d:d4:a6:b6:f4:e0:3f:4f:d5:
                    42:54:ac:47:3e:f1:44:5c:f2:dd:31:e5:a3:ab:9e:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:83:00:08:8F:5F:C7:74:4B:FC:D5:78:00:CA:8A:73:D1:22:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/778012c2-1c2e-3acd-a8b5-10ec4315d462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:c9:ae:72:bb:fb:0a:e6:e7:ca:0e:8a:7f:37:aa:c1:3d:
         84:22:a9:74:22:d9:6f:20:c1:b8:4f:64:f8:87:64:f8:15:fa:
         89:96:e4:2a:a5:1a:8d:a7:e5:7e:e3:4a:06:7a:0c:d0:49:a8:
         d1:1e:05:fb:1e:10:4a:a4:a6:79:e8:e8:02:c8:7a:a8:e5:93:
         d8:f1:80:76:f9:66:79:e2:8f:99:ec:ac:bc:7a:90:8a:d7:3b:
         b3:2e:99:39:ee:5d:91:48:25:90:e0:55:9b:99:fc:2d:7d:a7:
         e8:d6:80:20:b8:d4:d3:4c:24:d7:66:fe:7c:30:0b:f0:cb:3d:
         41:70:9a:92:0f:98:e4:ba:f0:fa:98:9c:3b:8a:4a:36:a6:c2:
         6c:57:c0:16:b9:49:a7:86:55:56:b6:52:41:76:0c:6c:c6:80:
         72:38:5f:d8:4a:88:d1:92:d8:19:a0:35:89:29:95:8f:11:79:
         43:bb:46:c8:ba:0f:0f:c3:1b:39:3d:e0:a0:c3:86:e0:a1:e5:
         56:bb:8a:99:75:01:d1:6b:33:96:c7:09:a6:1d:f4:80:17:5e:
         60:94:26:b9:52:22:be:cd:37:2c:25:b8:e4:6a:9b:f2:61:06:
         24:37:91:45:ce:40:d3:02:66:eb:78:79:46:cf:90:f4:3b:e0:
         66:47:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:12 2025 by rpki-client