Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa
File:                     947e85fe-bc11-386a-81b7-47e5c6c08791.roa (raw, json)
Hash identifier:          zplhywBChPWAzkOpLIBRqUiahyXZX+IdzRrbjxAAMgQ=
Subject key identifier:   DB:90:05:F6:F1:A0:D3:03:17:15:37:F9:02:56:9D:92:5C:5B:49:3E
Certificate issuer:       /CN=9206a173-a090-480c-96c4-8eb781fd02a7
Certificate serial:       010D0C9F4328584B0746C7605FFD3480914461D0
Authority key identifier: 30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     397972
IP address blocks:        216.181.104.0/24 maxlen: 24
                          216.181.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c7:60:5f:fd:34:80:91:44:61:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206a173-a090-480c-96c4-8eb781fd02a7
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=70aad19d-08b4-4594-96b9-48386bf9c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:a0:0a:28:08:72:d2:af:53:36:a2:53:42:
                    93:8b:4e:4b:ee:bc:aa:bf:66:ba:3c:0c:fb:34:55:
                    b2:1e:07:c1:cf:50:c3:02:f9:62:be:dd:32:71:ce:
                    01:1a:6a:96:1a:b1:c8:9e:83:76:72:00:14:46:25:
                    6b:10:bb:bd:be:28:04:60:6b:4b:43:e6:fb:ce:15:
                    59:56:ac:00:83:91:70:c6:81:8d:2c:09:5a:a2:b8:
                    d5:c9:4f:c7:14:0f:52:39:5d:36:29:bf:b6:70:83:
                    84:39:03:8f:8f:6b:2e:0c:80:7e:5f:b8:81:a1:97:
                    fe:43:55:95:73:ef:01:6f:65:ad:23:cd:9b:41:0b:
                    16:72:74:6d:95:70:d6:b5:01:6b:6d:26:6f:d0:44:
                    b7:7c:d5:5f:de:01:d9:57:1b:66:7f:97:5c:c3:2e:
                    bf:50:f3:6b:a8:bb:8f:74:59:6a:1d:45:3b:0d:a1:
                    d0:d1:2a:70:76:3c:56:c9:15:b3:3b:e1:79:e7:32:
                    d8:2b:25:f7:36:57:4d:67:5d:1e:b3:f2:9a:f8:66:
                    6f:71:48:c3:de:ff:59:f3:b9:28:68:c3:08:94:db:
                    2d:88:c4:8f:eb:b5:b1:8b:58:d2:27:17:86:4e:ea:
                    5a:0d:df:9c:64:07:3e:17:93:d5:2f:1b:30:25:46:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:90:05:F6:F1:A0:D3:03:17:15:37:F9:02:56:9D:92:5C:5B:49:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl

            X509v3 Authority Key Identifier:
                keyid:30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:d5:d4:92:53:08:77:1e:8e:6f:17:1c:10:91:91:92:c6:63:
         5e:77:f7:0c:18:58:4c:98:52:6d:bb:25:14:f4:b2:67:e9:d4:
         18:51:03:e4:ec:9d:93:9a:60:5b:e7:05:13:9e:7e:b5:8a:bf:
         bd:f2:4d:24:61:c4:30:0a:0d:fd:8a:75:33:71:89:5c:0d:44:
         48:25:c1:27:52:64:a4:27:6e:cc:57:67:99:9e:83:a3:6f:55:
         5f:64:5e:40:af:9f:93:7d:a0:4d:39:eb:bd:4e:2d:58:e2:3e:
         e3:b7:68:ea:4e:25:87:12:4f:75:73:04:e7:90:af:b5:64:56:
         18:21:c6:83:98:63:a6:0b:51:73:8b:fe:9e:d1:d8:45:06:71:
         dd:8c:bf:81:d0:85:38:c7:f3:15:c4:12:02:81:06:e4:e1:9e:
         3e:70:e0:33:c2:e7:b0:fa:60:3f:dd:7a:92:5d:d6:4f:7c:e2:
         5b:c5:b7:36:8c:17:0e:89:a7:9e:f2:a5:8e:3b:5c:11:c5:d7:
         be:90:86:60:c5:e2:6e:49:8b:2f:c6:4a:ee:33:a9:13:bb:c6:
         28:6c:40:6a:e2:8d:56:52:bc:d1:2e:29:85:03:b8:72:bc:9a:
         bb:30:8f:06:f3:5a:dc:31:10:dc:c0:3c:08:60:c1:a1:02:bc:
         55:72:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:09:07 2025 by rpki-client