Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa
File:                     c17d307a-6891-39f3-9e92-66ead209b199.roa (raw, json)
Hash identifier:          t9UzbkWVTvCnlJ+yyvAcApfAzt5QZY9GUcBCWohRnPI=
Subject key identifier:   DC:43:5D:BE:53:2C:E6:0B:26:97:DF:74:A6:BD:2E:DD:D5:B3:6B:80
Certificate issuer:       /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
Certificate serial:       010D0C9F4328584B5DD1F2E120B9B5BFB3C3A2C0
Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     11067
IP address blocks:        216.251.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f2:e1:20:b9:b5:bf:b3:c3:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=228ce2b1-46e2-4a06-bbfc-56221f632bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:e8:cc:3d:cb:10:a9:f1:e4:8e:dc:2f:96:
                    83:50:41:89:1a:5e:b6:da:73:8e:5f:8d:f6:df:89:
                    ed:13:fe:34:1e:e6:54:1f:0e:5d:dd:fa:f7:5e:42:
                    f9:b6:b2:f2:57:4c:08:2e:5d:50:54:b2:57:39:d6:
                    98:39:16:23:8a:55:71:2f:18:a7:a0:c7:91:65:54:
                    ac:03:16:01:9f:1b:d3:89:ea:ab:34:77:34:0e:83:
                    19:31:5f:e2:b3:fc:37:cf:37:55:c0:5e:fb:05:41:
                    24:cd:99:be:9b:58:cc:fe:ab:22:7c:91:e5:a7:01:
                    32:0e:27:8f:fd:91:1e:79:7c:f0:ed:37:16:4c:e8:
                    49:a4:fe:ad:25:d5:8f:8c:81:1f:26:5d:94:19:ba:
                    b5:46:15:c8:e4:ef:ba:52:93:ad:92:4e:d0:f1:5b:
                    53:4b:d9:39:cb:5a:8b:2d:3a:19:80:d0:f7:c6:f8:
                    f0:04:4a:fe:cd:fc:40:ba:5d:5b:e0:35:cc:48:6a:
                    77:de:c1:c3:a6:9b:66:a7:03:3c:97:e4:a1:b4:76:
                    eb:e7:54:38:6b:2b:2d:42:50:a0:58:4a:ec:bf:3a:
                    2a:87:2a:c4:86:ae:4d:a9:d4:ea:af:80:a4:b8:36:
                    a6:52:6b:f2:67:96:67:ac:75:62:9c:e7:d1:f1:93:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:5D:BE:53:2C:E6:0B:26:97:DF:74:A6:BD:2E:DD:D5:B3:6B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl

            X509v3 Authority Key Identifier:
                keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.251.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:39:ba:4f:27:1a:05:72:06:70:23:7e:e8:56:50:7b:b9:
         74:e2:70:04:bc:35:36:47:f8:a8:17:88:a2:d0:5c:f0:26:7f:
         65:8d:7f:5d:93:0e:bc:d3:a0:37:84:00:54:51:f8:d8:8c:b3:
         be:2c:57:a5:67:e0:bd:9a:7f:93:14:fd:ec:2f:e9:66:5d:04:
         2f:3b:d8:c5:eb:a6:dc:9b:8e:40:8f:e5:1f:01:63:59:3c:e2:
         08:52:26:ba:c5:3c:54:46:a8:0a:08:02:55:4f:22:cc:2f:a9:
         bc:5f:c2:be:fb:0a:e3:16:55:52:f2:19:86:9b:12:2f:a9:ef:
         e1:06:e4:f1:af:47:db:50:fa:de:25:5e:c7:6e:4e:fa:2c:88:
         dc:93:bf:97:1f:b3:94:27:0a:3f:47:60:51:fc:a1:1b:53:f6:
         46:1c:27:e2:44:10:1e:44:d6:9e:a4:7c:68:56:4e:ff:b7:74:
         bd:bb:54:c8:ab:fe:bf:6e:ab:9a:95:bd:5e:df:57:a1:46:9c:
         96:22:a9:48:d2:b1:42:c9:ad:70:96:cb:04:ce:74:95:52:8d:
         2a:9d:61:82:70:49:3b:6e:f2:87:73:5f:9f:c3:d1:50:a1:ed:
         aa:89:ec:9d:0b:64:9c:f4:bf:f1:70:cd:b6:be:89:a1:a9:0a:
         88:c7:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:51 2025 by rpki-client