Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b63a9ff0-f208-3347-8a4a-57eaa0f63495.roa
File:                     b63a9ff0-f208-3347-8a4a-57eaa0f63495.roa (raw, json)
Hash identifier:          sdLCpWKz7zQD49R0pi7dK/zzQf31cJiPn2/7HZ3FDDQ=
Subject key identifier:   9E:BF:AA:5D:9A:AB:35:A6:B5:F5:76:8A:0B:60:04:0A:36:EE:C4:9C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B276184F5DDD3C614F5D5D600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b63a9ff0-f208-3347-8a4a-57eaa0f63495.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     7385
IP address blocks:        216.191.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:84:f5:dd:d3:c6:14:f5:d5:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=09909f50-fc9f-4f91-bba7-87dab433acf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:96:ba:ba:19:c0:d2:ec:5d:b5:3f:aa:ef:
                    dd:68:a7:6f:6b:e2:02:86:4a:a9:31:e0:de:14:d8:
                    80:d0:85:81:14:0d:7f:a2:2e:57:b5:42:00:53:ec:
                    50:19:3d:4b:0d:91:32:73:50:67:f1:03:a4:c0:81:
                    98:04:dc:25:f6:55:9c:2e:4c:8f:b6:cc:02:1d:20:
                    8a:47:e6:94:98:ef:ec:67:54:5d:2c:d3:cb:37:77:
                    bd:1a:37:63:e8:22:d0:30:dd:d6:d7:f5:0d:32:40:
                    fd:2d:95:70:78:97:ab:15:25:08:96:ac:e4:40:29:
                    28:44:ff:2b:6f:90:18:41:da:cc:47:f9:97:f8:cc:
                    5b:3a:bf:6b:ba:40:7d:1d:fb:4e:69:89:ff:77:00:
                    62:51:fb:13:6b:52:04:e2:6f:d1:aa:75:8e:20:85:
                    58:06:bf:5a:26:5d:eb:58:ea:02:81:c6:e2:d3:b3:
                    12:d8:f9:e2:0e:e9:4e:4d:76:77:4f:c5:f9:22:99:
                    00:a2:7c:b5:80:2d:a9:92:00:70:3d:bb:4b:ce:c9:
                    49:1f:6b:b1:27:08:63:79:24:95:60:fc:a4:b7:6a:
                    68:3d:82:6b:a9:f4:8c:8e:2b:fd:0f:49:43:b8:fe:
                    75:5d:c9:cd:1c:53:1a:be:49:e8:a3:cf:e2:6d:83:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:AA:5D:9A:AB:35:A6:B5:F5:76:8A:0B:60:04:0A:36:EE:C4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b63a9ff0-f208-3347-8a4a-57eaa0f63495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:63:12:31:64:21:15:71:5b:67:bc:ce:37:25:c2:40:b6:82:
         7f:54:36:fb:52:df:78:30:16:57:5e:f1:77:66:11:af:18:d9:
         83:07:ea:62:a8:e3:65:79:5b:56:13:68:8e:3c:8e:1c:47:69:
         38:24:6f:cf:cc:61:44:29:74:a7:f4:bc:f0:35:c3:e5:e7:49:
         83:9c:7b:4d:f4:99:a5:17:fd:6e:98:51:55:71:8c:63:59:21:
         62:ae:d2:9c:b8:be:0e:8f:04:00:2d:b4:fd:a7:27:5e:aa:dd:
         60:aa:42:da:3d:89:19:7e:9a:f4:46:92:8d:88:27:de:f2:ea:
         77:14:c4:7e:54:4d:4f:02:86:a0:58:73:70:3f:41:5f:01:95:
         ac:dd:ca:fb:e5:84:71:90:73:d3:97:e8:55:2d:0f:dc:d4:84:
         95:23:88:9b:b8:1a:be:61:73:9e:f8:99:22:6b:1c:7a:ab:72:
         be:ae:c8:d8:88:47:05:62:53:ae:64:85:5e:46:ac:4c:c4:63:
         5f:9e:0b:aa:73:18:1e:14:ac:0d:ad:ac:7a:ba:af:0f:25:c8:
         86:88:ff:7c:b7:b4:ba:c5:04:30:f2:8a:d9:59:e7:ad:be:da:
         d6:fe:49:dd:66:10:25:3e:10:bb:a3:31:58:bf:0c:9a:46:0a:
         fb:d9:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:47 2025 by rpki-client