Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa
File:                     88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa (raw, json)
Hash identifier:          KdSUMfQwCw164fbDEuBCNaYDitUjT3tJ0FbZOP2u/e0=
Subject key identifier:   AA:AA:D5:C4:1D:BF:F1:28:A0:3C:4E:00:BD:C8:57:DE:A2:C5:DE:AC
Certificate issuer:       /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
Certificate serial:       010D0C9F4328584B5BA5368FDA499E064ABE3780
Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa
Signing time:             Mon 29 Sep 2025 18:19:09 +0000
ROA not before:           Mon 29 Sep 2025 18:19:09 +0000
ROA not after:            Sun 28 Dec 2025 19:19:09 +0000
asID:                     12119
IP address blocks:        216.169.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:a5:36:8f:da:49:9e:06:4a:be:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
        Validity
            Not Before: Sep 29 18:19:09 2025 GMT
            Not After : Dec 28 19:19:09 2025 GMT
        Subject: CN=13618849-d670-4392-8642-22c4fdcc59c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:cc:bb:83:a5:82:83:e4:b2:bf:6d:2d:8b:
                    8c:2c:6c:b1:19:ca:97:fa:60:cb:12:d8:1c:38:87:
                    d1:29:eb:c9:b2:a2:9a:e9:e7:b4:87:47:f2:6d:dd:
                    52:72:d3:9c:be:94:d9:89:cf:83:3a:1f:74:54:38:
                    be:53:28:8b:81:7e:39:af:3a:86:87:7f:3e:9a:86:
                    b3:47:2f:de:ae:a7:e0:27:a9:f9:f9:b2:d5:a7:46:
                    01:85:77:f6:3b:cb:fb:60:93:c7:7e:cd:fa:a2:a8:
                    50:9e:2c:a3:f7:ff:ac:b6:d3:90:86:54:26:a3:3b:
                    5e:a0:af:3e:3f:7b:91:51:ac:93:f2:55:67:0e:21:
                    f1:28:78:e9:11:7d:a1:55:64:60:a1:9e:dc:32:b5:
                    04:42:0e:ea:89:0d:43:8b:7c:0e:04:71:da:77:fc:
                    b5:f4:8b:55:d6:17:4e:e0:2f:ae:df:aa:8e:37:a8:
                    fc:92:2c:7c:a4:5b:72:81:d1:15:7a:5f:6f:fe:45:
                    44:c8:dd:c6:83:0a:55:69:52:7c:38:d0:68:b9:3f:
                    68:a8:6b:55:76:36:bb:e4:b2:dd:54:3f:a4:40:ed:
                    78:c2:31:c1:e0:6b:e5:e9:3d:ad:93:d3:c3:aa:44:
                    13:4b:86:12:15:e0:78:da:89:9c:ac:9d:88:50:33:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AA:D5:C4:1D:BF:F1:28:A0:3C:4E:00:BD:C8:57:DE:A2:C5:DE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/88dfce1e-b0ab-33cc-8a60-95ad0beb825d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl

            X509v3 Authority Key Identifier:
                keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:74:4c:d3:c7:a8:47:e1:b0:7e:7f:7b:5e:b0:60:3a:33:bf:
         8e:0a:11:da:4f:aa:57:16:c9:de:1b:ad:da:fd:4e:86:e1:8d:
         6b:ef:ce:1d:0f:d9:0b:88:7d:75:ca:1b:10:b1:7d:36:2c:2a:
         4d:d8:bb:e5:0b:fb:8b:08:79:2d:18:93:b3:29:2a:9e:10:b8:
         aa:7f:ab:f9:f9:d5:38:c0:a5:ef:f0:8d:a7:e7:68:88:7c:53:
         e3:8e:33:8e:f2:d0:d3:a6:7b:a2:db:49:21:9b:b0:50:ad:d4:
         77:a7:36:74:a2:b2:7a:16:ef:51:57:78:67:ef:e9:94:ed:bb:
         d1:8e:5a:7b:c8:83:74:ed:a8:b2:35:65:c6:b3:de:96:a8:6d:
         d3:0a:26:03:1d:8f:4a:73:de:4c:91:fc:e9:9d:92:32:57:bf:
         8b:6f:f0:8d:86:75:0b:3f:12:6a:0c:6c:d8:f8:b7:c6:c6:f2:
         cc:06:93:ee:25:37:18:92:17:64:a2:fc:82:90:22:a1:9f:2d:
         20:48:f3:a5:30:3d:08:ea:49:f2:8e:5a:77:7b:98:32:08:13:
         9d:64:5b:23:ec:3b:4b:5c:51:d2:d1:bd:b2:2e:7c:4c:4b:6d:
         33:53:51:cc:55:9d:73:68:b8:b0:ba:aa:81:4a:67:60:fe:11:
         1b:f6:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:34 2025 by rpki-client