Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/65d88b12-5d10-326b-8745-688ecf1b3f1b.roa
File:                     65d88b12-5d10-326b-8745-688ecf1b3f1b.roa (raw, json)
Hash identifier:          SJNG/CsSdqqKnwSnXmSQHah8KFhnO6gFtBZEpye9+sU=
Subject key identifier:   F1:B7:75:0B:3C:72:F1:F1:EB:D8:91:56:0D:B8:65:27:5D:38:67:40
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F4328584B4081A3DDB92DE0B6A2115E80
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/65d88b12-5d10-326b-8745-688ecf1b3f1b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        209.182.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a3:dd:b9:2d:e0:b6:a2:11:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=3428119e-e83f-4840-a8d7-9b3427775e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2a:65:5a:53:26:e2:31:dc:6d:b2:69:ad:5f:
                    7d:7a:f7:a6:ae:35:f8:b1:c1:f0:bd:5d:4c:e7:eb:
                    ac:39:d3:e0:5d:df:a4:19:5f:2b:d8:eb:30:6f:be:
                    44:3c:5f:68:46:80:f2:f2:b1:0a:5a:6b:5f:e7:13:
                    93:ad:10:46:17:a9:df:32:3a:37:b8:0c:79:e4:48:
                    86:79:ad:ff:e2:25:72:a2:ed:a2:55:e3:f2:d3:d1:
                    b0:db:8b:ba:ce:a9:5f:d4:2e:45:6f:b5:39:85:eb:
                    32:92:bf:ae:f5:7b:a5:70:4b:5d:67:88:5f:74:31:
                    95:bd:a0:29:3e:f1:0c:a0:d1:1d:2f:55:93:2d:5f:
                    20:5e:40:2d:8e:20:cc:89:f9:c9:2d:9c:3b:9e:52:
                    23:63:d2:64:80:3b:c1:01:e2:43:0f:86:be:18:58:
                    02:bf:8d:40:f3:e4:49:1a:ea:07:c7:83:a7:f4:51:
                    c7:de:8f:bf:45:35:8e:c3:f2:95:66:1e:9f:ac:e4:
                    c2:8a:76:2e:b4:40:6a:d2:bc:e4:85:2a:c5:ce:0c:
                    73:30:1e:50:bc:65:88:9c:48:f4:20:7a:0e:eb:5f:
                    7e:1c:39:13:0e:4b:72:f2:61:f2:fc:f0:c5:b8:c9:
                    f0:ff:f1:0b:23:09:f8:af:b1:3d:9b:53:7e:3f:d0:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:75:0B:3C:72:F1:F1:EB:D8:91:56:0D:B8:65:27:5D:38:67:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/65d88b12-5d10-326b-8745-688ecf1b3f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:bb:0c:91:c7:8d:4b:03:92:61:1c:4c:bf:df:1c:4f:95:
         3d:91:b3:91:34:88:e4:45:be:1b:2a:33:18:d5:0a:3e:a3:c8:
         eb:9c:b7:f8:2c:7e:26:bb:c6:79:fc:16:7d:ab:79:43:a5:fc:
         84:ad:d0:b9:5f:ef:65:ae:db:79:e9:70:af:0e:2e:fe:34:45:
         fe:98:62:58:0f:22:e9:ec:70:4a:bb:74:57:fa:5d:c9:99:2f:
         65:c5:ad:a3:2d:b8:f6:4c:2c:d7:b7:a5:92:eb:d7:74:47:79:
         88:93:c0:3a:8b:13:b2:c4:54:8a:95:51:a4:b5:70:e3:c6:d9:
         c9:cf:80:fc:e1:7c:77:52:85:44:31:77:6b:e2:6e:4e:96:9c:
         5a:26:e5:78:75:a1:1b:dd:f1:69:4f:e2:c9:3e:5b:d8:17:f6:
         0d:74:b6:6b:19:85:b9:8a:a0:f1:b2:d3:ae:1a:81:1f:21:6c:
         05:f9:ee:10:74:78:43:f2:9f:ed:1b:e9:cd:60:19:7e:4b:b4:
         71:0c:f5:50:f8:e6:18:b2:3b:76:31:12:b8:de:b5:da:37:82:
         d2:ca:20:14:7c:02:43:ea:46:3e:de:3e:ec:8d:d2:6d:a7:d2:
         09:96:ac:13:54:7f:24:1c:bf:db:91:63:8b:ba:a2:16:d6:4a:
         6b:f1:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:21 2025 by rpki-client