Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
File:                     5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa (raw, json)
Hash identifier:          H2a+ct6/LjnPLLo1JxYGmhwSIzAoNTthVzKuEQx5MKU=
Subject key identifier:   F4:2E:C1:C3:18:8B:B4:2F:AE:D0:48:9E:74:E5:F1:B1:B5:56:CD:D0
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584B78574A3089E86BA227C7D000
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     398700
IP address blocks:        216.98.224.0/23 maxlen: 23
                          216.98.236.0/22 maxlen: 22
                          216.98.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4a:30:89:e8:6b:a2:27:c7:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=7db31b6f-286e-4c3c-a4fc-a9e4a533a1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:a6:0e:bf:78:26:c4:95:dd:b9:e5:a9:35:
                    46:40:e7:38:af:7d:b3:ec:2a:22:cc:b3:90:0c:af:
                    22:be:3e:5d:25:75:6d:fb:76:fd:05:9a:e0:86:02:
                    4c:fe:f9:b1:20:3a:b2:2f:be:33:b9:38:22:87:b1:
                    6d:ba:62:76:90:24:bc:24:03:9f:ec:ba:14:f1:33:
                    7e:3b:46:63:f9:0f:0e:0b:5d:14:ce:41:5b:57:29:
                    fe:11:e7:d0:c2:67:d4:bd:df:c1:c3:4a:24:bb:75:
                    d6:dc:d7:f3:51:85:bc:00:84:62:af:40:b3:e6:4e:
                    89:04:1f:cd:65:71:ef:62:fe:00:e7:f1:12:41:32:
                    ef:7f:2c:68:a1:66:8c:f1:63:50:71:c9:23:9b:94:
                    b8:be:2d:f7:e5:ac:0f:38:59:08:25:7d:f2:a4:cf:
                    8f:f9:e1:0d:d7:be:bb:11:94:56:4c:a9:1d:3c:8b:
                    f2:10:11:1a:92:4b:4d:56:07:65:a0:a4:ad:3a:43:
                    cd:41:f5:5d:df:39:41:08:b5:14:93:e1:82:98:59:
                    48:de:58:63:aa:c4:d0:26:14:a1:89:84:41:eb:b8:
                    20:61:26:b1:56:90:b7:54:33:5e:85:49:8e:73:10:
                    12:9e:2b:84:a7:fc:4b:7d:bb:99:18:2e:f8:c6:7b:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:C1:C3:18:8B:B4:2F:AE:D0:48:9E:74:E5:F1:B1:B5:56:CD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/5a9046dc-7b17-3fa0-94c3-3970d27d9709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.224.0/23
                  216.98.236.0-216.98.241.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:dc:10:4a:5a:22:4a:a7:b1:70:53:35:b6:ad:04:6d:57:a2:
         f4:14:2f:09:98:1e:99:7d:f2:1c:3b:d8:c5:99:9a:93:a2:00:
         87:83:aa:b6:0a:2d:c1:1e:7a:f4:d3:a4:15:7a:03:00:6f:7b:
         d0:84:da:39:c1:c1:27:97:4f:9d:63:cf:b6:fb:87:66:42:74:
         11:26:61:fd:e6:59:67:fd:41:83:ea:37:dc:ce:7e:8e:8d:af:
         c5:2a:df:fe:d0:a5:b9:2b:8c:42:d9:00:0f:b6:07:e9:42:6f:
         73:6d:fb:f8:ed:55:f5:1b:04:3d:b6:c8:d0:aa:18:35:ee:b5:
         89:06:bf:f4:78:df:d2:8b:e5:47:b3:ee:7d:9e:3d:1c:5e:63:
         ae:c4:79:68:8e:7d:9a:49:35:a9:94:ce:e9:74:a9:e3:b3:dd:
         f2:39:b0:81:cd:71:87:e5:e7:4e:d9:2c:a8:dd:f8:88:39:2a:
         c7:c7:94:13:d1:b6:df:04:9f:eb:8c:bd:94:39:bd:d1:cf:06:
         cc:af:bb:d6:6a:ab:f0:1d:64:5d:86:af:5d:90:a3:e1:8b:8b:
         81:23:8a:e4:e7:be:bc:98:8f:b2:db:c2:c7:2e:89:cd:ba:c7:
         11:77:55:bf:35:e6:5e:bb:8d:18:9e:be:b2:8d:49:46:2d:33:
         6f:00:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 03:15:23 2025 by rpki-client