Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/e780262b-babf-312c-8170-69064088f6c6.roa
File:                     e780262b-babf-312c-8170-69064088f6c6.roa (raw, json)
Hash identifier:          MfXCVtKU1xfKZG95HD9/nPDkZCYzskym8okOgkVijCM=
Subject key identifier:   E2:3C:2C:5A:1F:15:7B:E6:A9:7B:1A:73:A9:7E:7A:E7:99:1F:E2:A8
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584B4FDC80B2286DDC279DF29A00
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/e780262b-babf-312c-8170-69064088f6c6.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     13916
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:80:b2:28:6d:dc:27:9d:f2:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=cf071b87-8ebb-4f6c-98b8-0f168e044080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:c8:ba:87:1f:fe:d2:96:40:38:72:bb:a9:
                    1a:47:f6:39:32:83:0f:76:3e:da:5f:7f:82:9e:ba:
                    c0:7f:7a:d5:48:5f:c5:30:84:09:65:ab:ef:58:9a:
                    fc:a3:45:f4:4c:19:cc:77:26:95:57:d3:a1:34:3d:
                    2b:a6:39:0f:eb:4d:27:35:0a:4c:56:62:08:ae:f6:
                    92:4d:42:18:09:c2:cc:ff:82:85:ca:91:65:37:9b:
                    57:0d:f7:ce:73:c1:2f:48:75:ee:40:91:80:4a:9f:
                    95:13:ef:19:0b:2a:2f:ee:a1:8e:3e:4e:5c:19:46:
                    e1:eb:61:f3:77:a9:1b:97:e4:92:4e:1b:47:63:2b:
                    74:45:7d:11:cd:1b:3e:16:10:cb:e1:49:22:d1:d4:
                    c1:ac:9f:67:3f:19:a3:1d:9d:fa:d8:2e:34:3f:50:
                    ae:6d:cc:ea:9b:56:5c:be:0f:8c:2c:ab:c4:d3:18:
                    0f:b2:f4:c1:43:2d:24:62:15:57:80:21:d5:61:61:
                    2d:f8:36:88:5b:75:05:3f:8d:a8:d1:45:37:8a:e7:
                    fe:fa:17:cd:c6:af:cf:b1:fc:e5:64:d6:03:01:bd:
                    e7:d5:d2:b0:70:2a:07:ea:de:4b:da:ba:a1:02:66:
                    10:3e:35:29:a0:b2:67:2c:8b:bc:47:c8:25:52:18:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:2C:5A:1F:15:7B:E6:A9:7B:1A:73:A9:7E:7A:E7:99:1F:E2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/e780262b-babf-312c-8170-69064088f6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:0b:af:06:8d:0d:7d:f8:d3:b3:c8:ae:48:3a:a1:70:21:
         75:cc:11:b2:f8:8b:c7:ba:c6:02:46:df:0b:8c:8c:ee:e9:87:
         b6:83:2b:5d:10:26:2a:a5:17:8d:17:a5:31:c1:76:10:ec:e9:
         76:ec:7a:5d:1a:63:22:e2:04:8e:0b:a7:f0:03:45:c1:9d:8a:
         7d:4f:06:65:d8:8b:c4:a3:27:42:d5:6d:65:f8:e6:7e:94:56:
         53:67:7c:96:a4:3b:73:56:6a:38:17:14:8d:8c:31:0b:d1:8a:
         f1:b0:b8:54:a0:93:30:d5:b8:8e:3e:a1:63:00:ca:1d:2e:af:
         8e:98:19:1f:a3:77:bb:f8:b6:12:8c:37:bf:20:31:78:9a:3c:
         3b:87:b0:a3:0b:c1:0a:8d:b5:07:0a:63:e4:e2:9f:d3:3a:bc:
         14:4c:49:da:8d:52:44:d7:dc:18:eb:bb:b9:0f:bc:7a:30:a1:
         51:bc:4a:a7:f5:5a:4e:55:10:04:85:8c:b9:05:e8:c0:f5:83:
         07:5b:67:38:3b:e4:23:31:89:be:bc:ab:ee:ed:92:2c:fb:35:
         b7:72:a1:da:98:e0:b7:cc:42:e8:7d:ae:6e:35:bb:31:44:ee:
         96:45:bd:3c:f1:1e:a8:e5:cf:89:28:d2:9d:46:09:66:1d:86:
         1c:98:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:11:27 2025 by rpki-client