Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/2a076183-4bac-3240-b6ec-03e9c5bdf9b3.roa
File:                     2a076183-4bac-3240-b6ec-03e9c5bdf9b3.roa (raw, json)
Hash identifier:          wAyo+3W6SRuYlJXbmBsmiCai+e8DjDb0pfva7X2ElW8=
Subject key identifier:   14:A3:86:EE:91:A9:DD:BA:60:E5:70:CA:A0:2E:DB:B6:52:F4:F3:6C
Certificate issuer:       /CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3
Certificate serial:       010D0C9F4328584B6201FF59A3A6B0AC79953E00
Authority key identifier: BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/2a076183-4bac-3240-b6ec-03e9c5bdf9b3.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        199.34.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ff:59:a3:a6:b0:ac:79:95:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=31a2864e-0d4d-4391-98d8-b2849f108858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:b8:cb:8e:e1:8d:17:4f:20:8e:e7:70:93:
                    80:4b:3d:f5:58:ac:6c:9e:64:de:9d:58:de:e7:6a:
                    c4:1c:ef:30:47:ee:a6:08:63:36:ae:03:70:d4:cd:
                    8d:f0:5e:9a:96:ec:a3:11:f2:b9:8c:48:af:a5:09:
                    1c:d8:e9:3a:82:e7:38:8f:33:24:18:99:01:5e:b0:
                    27:ae:2f:27:e9:23:e6:4d:53:0b:c2:21:da:20:11:
                    8a:a7:f9:cf:7c:d1:51:61:8b:81:ef:5e:42:bd:01:
                    00:30:f8:83:97:e6:4e:40:22:0a:69:48:d2:ff:13:
                    7f:82:82:81:c3:38:ca:6a:10:2a:d7:02:42:76:aa:
                    70:45:99:67:f6:01:ea:e1:c0:33:44:2f:cf:90:55:
                    06:3c:b1:67:17:25:08:4c:51:cd:c5:7e:c5:ce:8d:
                    0b:7a:97:76:3a:a2:9d:7b:88:c8:bf:d2:e9:d8:1a:
                    0a:43:67:f3:50:dc:17:31:a1:3b:78:6e:06:75:76:
                    e1:a4:95:91:6a:46:3b:c0:44:69:fb:78:c5:18:62:
                    8e:a0:c5:57:2e:e9:20:c6:6e:c8:31:e7:c7:d6:d8:
                    d7:6d:b4:fa:7b:e1:37:f3:89:c1:97:f0:38:93:08:
                    c7:e7:ed:f2:a5:c3:5c:3c:37:4f:e7:90:09:ab:e4:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A3:86:EE:91:A9:DD:BA:60:E5:70:CA:A0:2E:DB:B6:52:F4:F3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/2a076183-4bac-3240-b6ec-03e9c5bdf9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl

            X509v3 Authority Key Identifier:
                keyid:BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:2c:30:0c:4a:00:d8:28:8f:ea:8c:0c:43:32:3e:ad:a4:
         26:eb:9e:39:2e:a2:f4:97:d2:c1:5f:1f:27:b2:9d:ea:e7:47:
         8a:ed:d3:12:22:53:45:d7:4d:92:ca:fa:01:73:ce:97:4d:1a:
         9e:db:f1:f8:2f:b4:18:48:c5:c7:d1:23:a5:12:eb:2b:8a:f1:
         f4:fa:95:58:dc:05:6f:3b:f1:ae:a2:10:64:76:4b:41:ad:e9:
         e4:e1:63:1b:91:f3:84:fe:a3:34:01:90:1d:40:1f:ed:47:ca:
         1b:f6:5e:ae:94:9a:b1:65:2f:fe:65:68:b3:09:f0:33:53:cc:
         81:7c:1c:64:11:63:83:49:e7:4b:32:e5:f9:89:68:a8:1e:2d:
         43:54:50:bf:42:9f:b5:9c:c5:96:3e:4a:98:a3:41:84:76:1f:
         7a:a4:92:8c:2c:81:fc:74:e5:dd:c1:77:d4:2e:e8:6f:7b:5f:
         de:8a:f3:7e:4d:91:ad:fd:26:6a:47:01:85:c6:6d:33:97:f7:
         1c:9c:8e:37:73:f3:f0:93:73:2a:ee:6d:36:fe:4c:89:85:46:
         52:0f:57:08:1c:f3:b1:e8:ac:ef:a2:d5:90:23:dd:c7:af:fa:
         bf:7f:12:25:3f:92:df:3d:f1:84:1c:65:c0:f4:2c:f5:b9:d3:
         4d:db:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:20 2025 by rpki-client