Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa
File:                     4d58af25-f7ee-30be-8bbe-240b424b0891.roa (raw, json)
Hash identifier:          5mBrRRcdAHbT5O5GymGV01KbvWXEVrdCLnuU+yRgm8w=
Subject key identifier:   66:EC:90:27:7C:83:4E:5F:90:2C:2F:76:8F:8B:E5:AB:01:0E:42:AE
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76C28EA87CE52EB2FF1900
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        216.243.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c2:8e:a8:7c:e5:2e:b2:ff:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=dda167de-41a4-4356-9f24-372d2ee832bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:9f:61:fa:78:0e:b3:fd:59:c6:b9:7c:b4:
                    eb:b1:00:62:c7:0a:07:42:67:86:f3:f2:38:39:38:
                    07:44:66:b7:86:73:ef:ea:5c:07:f7:5f:e7:36:62:
                    2e:e1:fd:dc:df:e3:ee:e7:e5:c2:56:8f:cb:43:34:
                    3a:4e:4b:da:79:e8:2b:3c:57:6f:b8:9d:f4:ba:c0:
                    c8:35:56:95:69:34:32:66:85:c3:d2:f8:ce:38:3d:
                    84:74:6d:c7:01:7b:b9:f3:0a:49:c0:45:a4:b3:a9:
                    40:6f:5b:8f:29:25:69:57:b5:d1:b0:d2:d5:91:90:
                    35:ab:3a:32:b3:64:3f:d4:27:77:91:af:8e:43:bb:
                    c2:54:71:a9:d9:fc:2b:f1:f3:e4:d8:39:8e:91:52:
                    5c:b4:52:80:81:b7:be:2a:bc:b4:2d:f0:fe:80:90:
                    e7:fe:61:d4:19:98:ca:30:26:6a:b1:23:6e:c9:b8:
                    25:37:e8:4e:f2:a4:e2:c9:62:bc:1d:4e:f7:fc:f1:
                    95:f2:64:72:2a:20:23:bb:79:71:3e:0d:60:d7:14:
                    e7:3e:9f:5e:c9:8e:8d:ab:f3:ef:dc:97:05:91:f6:
                    cb:51:c9:ac:01:a4:bf:b5:16:6d:ea:04:d5:ea:12:
                    49:bf:99:de:21:e2:5d:5c:fc:9f:a2:33:67:1b:db:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:90:27:7C:83:4E:5F:90:2C:2F:76:8F:8B:E5:AB:01:0E:42:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.243.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:64:61:62:e6:88:2b:37:f4:ee:dd:2c:07:fd:7d:60:ee:e9:
         87:fc:21:c5:c1:a2:69:c5:f6:0d:26:75:55:c6:60:72:1b:86:
         9e:10:ae:70:ad:ac:e9:46:df:8e:78:09:39:4f:08:f3:26:db:
         e6:c9:5c:62:5b:f8:77:1f:9b:b7:28:3e:e2:47:10:76:4c:31:
         a3:f5:86:ad:a2:2e:55:12:b2:57:be:6f:1b:6e:43:f6:31:42:
         7f:5d:9b:68:21:02:63:bd:c7:c1:68:e8:18:5a:0d:96:1a:9f:
         01:ed:47:28:0b:9d:75:ab:aa:91:0e:d6:d6:c3:12:42:24:f1:
         86:6f:8b:a2:28:5e:3c:47:52:40:77:bd:cb:03:d3:d7:ce:32:
         20:92:76:c1:83:7e:74:fc:a3:b8:91:3d:ef:da:5e:9e:d8:63:
         09:43:5b:91:a0:8e:71:05:c8:e0:2c:39:52:45:3b:27:18:18:
         5d:f4:92:29:81:93:44:aa:f5:72:bf:45:8b:68:67:78:54:a0:
         55:09:49:18:f5:f0:4a:67:26:a8:17:52:2c:90:39:e4:ee:b2:
         07:73:0d:9d:55:df:49:1d:7a:a1:b8:92:e2:87:29:f6:1a:62:
         9a:7b:cc:05:86:17:ee:f4:cc:4d:b2:09:e1:db:d5:c7:16:6e:
         02:d7:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:38 2025 by rpki-client