Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa
File:                     dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa (raw, json)
Hash identifier:          ck1e0+TM4Kqdnq1ClZ52IAoFgeB8hhcsPdCsXMN0+cQ=
Subject key identifier:   BE:00:2F:B6:0D:20:BB:DF:21:88:13:E6:03:BD:7C:6E:92:A2:19:77
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B616483D6B5443D6A8F696480
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa
Signing time:             Wed 01 Oct 2025 19:43:38 +0000
ROA not before:           Wed 01 Oct 2025 19:43:38 +0000
ROA not after:            Tue 30 Dec 2025 20:43:38 +0000
asID:                     19901
IP address blocks:        208.160.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:64:83:d6:b5:44:3d:6a:8f:69:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct  1 19:43:38 2025 GMT
            Not After : Dec 30 20:43:38 2025 GMT
        Subject: CN=bf5010f8-f1e0-4366-ab2f-46c6c1a52daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:3a:81:cc:94:a4:05:12:87:97:53:59:e6:
                    5c:8a:72:58:27:23:79:c4:b3:f5:97:6e:f3:96:c1:
                    0a:55:98:08:fa:da:ab:1e:f4:18:2f:d8:41:0e:80:
                    ea:f8:9b:42:c7:fb:e9:b6:4b:9b:40:98:de:6b:67:
                    ab:62:74:d3:1e:49:7a:83:cd:bb:12:af:9b:59:b4:
                    b1:81:4d:f1:9f:c1:e3:db:17:ed:c6:0f:83:dd:ce:
                    9e:96:54:d4:39:05:d3:46:28:5b:b1:0f:0c:6a:0c:
                    bd:ec:58:b7:cf:4f:ba:75:e4:78:3f:59:59:fd:7d:
                    84:49:26:e9:0d:26:43:22:e9:3a:12:33:61:8f:cc:
                    69:9b:56:98:8e:a3:f3:8e:d4:82:5e:91:0b:d4:46:
                    7c:59:4d:21:aa:06:6e:a8:33:f4:07:38:51:67:2f:
                    99:9f:df:4a:2d:7b:a5:83:fe:3c:62:44:07:8c:d1:
                    e8:dd:02:9a:74:22:9d:75:9b:50:e6:fc:ce:46:23:
                    94:cb:c0:ff:05:56:bd:67:63:45:39:04:82:c6:01:
                    47:7e:cd:5e:29:bc:a7:eb:b6:8b:48:ad:b9:37:ef:
                    23:70:68:e5:4b:d0:8e:d0:3d:d3:84:4e:54:94:e3:
                    85:26:07:18:49:32:7b:19:cb:59:3e:61:ae:43:65:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:2F:B6:0D:20:BB:DF:21:88:13:E6:03:BD:7C:6E:92:A2:19:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/dbc8f081-b1fe-3eef-b76f-82945f2e63d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:74:d2:ef:e2:93:51:76:d8:92:e8:1b:d2:ca:01:6c:38:96:
         67:24:9c:9e:e8:35:ba:e6:db:c4:86:fc:d8:ad:a3:da:99:49:
         60:13:7e:01:aa:ef:d4:02:ad:a2:a1:68:07:aa:42:9a:63:c0:
         7d:53:94:75:3a:b6:53:7f:9d:1b:bb:bc:d0:4d:9c:e7:c3:4c:
         31:ca:13:a8:0d:ec:5b:ca:6d:02:c0:68:5c:86:ae:15:da:79:
         70:dc:24:6c:74:10:51:f4:8a:d6:24:b6:36:96:b6:7f:37:e6:
         ed:cf:0c:ef:c9:34:eb:90:f3:f0:f2:e7:0f:f7:7e:c6:8e:c9:
         35:9b:61:f8:11:09:43:9d:30:bc:58:e8:67:7d:bd:95:e8:6a:
         97:29:66:66:94:b6:0f:06:07:57:72:57:94:b9:81:5a:ec:d3:
         82:a8:dc:fd:8b:e6:01:1b:8c:c3:6f:56:8e:e1:52:30:5c:0a:
         32:b3:6c:40:27:f8:23:f7:3f:ab:8a:14:c2:92:09:40:ca:9e:
         a8:2b:51:3d:0e:3c:3b:ae:6b:00:2a:e6:69:45:aa:5e:c8:84:
         02:05:82:fe:51:ba:78:08:1e:43:bf:44:b3:57:53:94:14:36:
         87:31:9f:52:96:e7:0a:c6:1d:9a:c1:f1:fc:98:bd:4b:ac:a8:
         f4:7a:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:57:41 2025 by rpki-client