Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84b64b39-ae9d-3458-aa5d-5f46473e92a4.roa
File:                     84b64b39-ae9d-3458-aa5d-5f46473e92a4.roa (raw, json)
Hash identifier:          z8tJL11e2ezqWfq9+Mxjhboldsf/OX6Z3E8iZzZ7Iuw=
Subject key identifier:   23:44:68:10:4F:C9:06:7C:71:30:88:2D:6A:97:7C:65:0C:FF:31:8F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5C2F1874399EB0459E40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84b64b39-ae9d-3458-aa5d-5f46473e92a4.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        216.13.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5c:2f:18:74:39:9e:b0:45:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2c77174b-1928-4eb6-b14e-9a297102be98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:14:61:6c:cf:65:07:4a:a9:b0:b8:2f:ca:
                    52:0f:09:08:59:a4:97:15:42:70:58:86:d8:98:d2:
                    37:f7:4f:70:37:18:39:86:8b:ac:d6:db:97:b3:e1:
                    88:13:ba:7e:f9:98:4f:60:f2:ab:0a:80:cb:3e:d3:
                    e2:81:70:2f:e6:a5:e9:e3:ab:d9:9d:ef:f4:99:78:
                    97:32:62:89:b0:de:17:60:98:61:c5:19:b1:61:d0:
                    c9:6a:51:20:0f:14:38:45:00:c6:47:77:94:69:f6:
                    72:24:00:f7:2f:b0:c3:51:f9:ce:a0:2b:bd:c7:dd:
                    66:7b:a1:64:03:41:4b:f6:37:58:11:74:a7:af:24:
                    fd:56:6b:20:58:86:49:91:52:d9:1f:37:7d:3e:0e:
                    11:c6:9b:93:c2:24:46:94:f6:3d:55:95:cc:f1:42:
                    50:ec:93:a7:1a:60:b9:0f:8f:84:5c:90:92:32:19:
                    f2:c7:21:65:70:16:7c:75:55:83:93:2d:a0:bb:6a:
                    ab:e9:a2:39:7b:aa:0c:d1:96:9e:72:db:81:96:6a:
                    e5:7b:76:ab:08:0d:d9:ce:e6:9a:d0:9e:f9:74:15:
                    e9:15:b1:ee:ed:d1:8a:b1:5c:2b:7c:c6:ee:d1:ee:
                    73:98:30:c4:d0:a8:ee:b8:36:c2:97:ab:27:ae:e5:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:68:10:4F:C9:06:7C:71:30:88:2D:6A:97:7C:65:0C:FF:31:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/84b64b39-ae9d-3458-aa5d-5f46473e92a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:58:ce:97:3e:e6:da:6d:bb:a2:49:9e:ff:59:db:c8:15:01:
         01:b4:15:dc:be:24:e0:ea:81:2c:db:c9:e0:23:3b:35:9d:cc:
         c3:65:95:fa:9a:e3:a3:a5:07:3a:e2:10:b1:80:dd:5b:b6:76:
         d0:0e:c0:90:17:a3:d1:ce:c6:76:e9:11:70:49:73:6d:84:02:
         1d:1e:b4:bf:44:b0:58:df:d8:d1:60:41:9b:4a:90:7f:65:84:
         f8:ac:f0:b6:90:fc:c8:1a:3c:66:43:53:a0:67:d2:16:9a:62:
         c5:9f:83:37:26:29:74:89:65:7b:b5:1e:4d:6f:f0:24:ca:d0:
         c5:6e:e5:ba:a7:b5:40:ac:fe:37:ec:88:65:eb:4b:21:f9:40:
         f8:35:cf:c2:5b:00:c9:eb:a2:13:77:2e:4b:ba:55:1b:ce:df:
         46:e9:83:66:ac:55:43:15:8e:1b:c7:8f:87:8d:e4:be:e5:7c:
         26:eb:ae:03:05:99:e5:e5:9d:f9:12:10:75:c8:a9:80:a0:f3:
         f0:e5:6a:55:f8:c0:a7:5f:9c:74:4e:06:32:62:ea:62:b7:ce:
         44:c6:af:6e:1c:2a:df:71:7c:9b:6d:9f:9d:86:55:7c:90:73:
         03:1f:b5:22:a5:4e:33:55:68:26:30:b2:66:c4:2e:c4:b4:09:
         a5:c3:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:10 2025 by rpki-client