Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa
File:                     37222472-cf79-3fd0-8500-a35f8d0f77e7.roa (raw, json)
Hash identifier:          Bg96clWIXuUQ0deb1M6jHdvaGw5KXeli6A6+ypPGcY4=
Subject key identifier:   0B:A1:5C:E3:82:1D:CC:70:2E:5D:5D:B5:EF:59:6D:A7:CB:3C:BD:9E
Certificate issuer:       /CN=cda72809-682a-4951-9ff4-248386ec2d4b
Certificate serial:       010D0C9F4328584B01B14B4A212642D61E153800
Authority key identifier: 3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        216.115.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:4b:4a:21:26:42:d6:1e:15:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda72809-682a-4951-9ff4-248386ec2d4b
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=55ad1bf3-0709-47a7-bed9-fe526d777eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:b8:3d:7e:05:ad:19:8f:72:3c:bc:dd:37:
                    8c:8a:ef:5c:d4:0b:09:59:53:68:ee:db:e2:8f:36:
                    83:b1:e0:57:30:41:4b:af:b8:6d:d1:53:55:fa:b0:
                    98:23:89:43:ec:f2:33:b2:1a:7b:8c:05:01:97:dd:
                    75:97:f3:e8:09:ac:31:02:72:7b:a7:a6:a4:01:f2:
                    a6:3c:d7:e8:c2:28:7b:8d:dc:bc:48:fc:7f:4f:02:
                    cb:59:be:cd:92:b4:64:04:aa:94:36:21:c6:31:a3:
                    0e:2a:8b:89:81:12:50:b8:48:34:8e:fe:74:9f:aa:
                    41:0e:02:ab:1e:97:78:e5:27:5d:0e:fa:46:5e:ce:
                    8b:a4:04:bd:47:95:c4:28:9c:b5:b2:16:19:ec:74:
                    79:bb:58:23:36:54:a0:02:88:7a:5e:d2:79:c3:23:
                    5a:92:7c:d9:3e:e7:b2:2e:6a:0a:33:66:e6:7c:38:
                    75:99:89:bc:1b:ae:b2:7c:55:af:81:7f:4e:f9:a3:
                    e7:10:81:0c:bf:dd:d4:f4:d9:f8:15:5f:a2:51:90:
                    9c:a8:9f:c5:92:04:2c:44:f0:6e:87:31:57:b2:33:
                    bf:f4:16:9c:ff:8a:83:29:ba:35:68:79:37:ef:87:
                    87:72:0c:36:3c:b2:bc:4c:d7:4e:1b:06:59:6f:91:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:5C:E3:82:1D:CC:70:2E:5D:5D:B5:EF:59:6D:A7:CB:3C:BD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/37222472-cf79-3fd0-8500-a35f8d0f77e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:81:a0:7b:3c:a4:53:64:1d:76:2c:5e:e1:f2:73:60:89:44:
         d2:f4:45:cd:d8:4a:db:a1:0a:7e:19:7a:e8:dd:9b:8b:c9:5d:
         8b:47:e3:72:df:7f:69:09:84:f3:d8:37:83:eb:04:b9:9c:47:
         9e:9e:0e:a6:f9:29:da:fe:a0:e0:89:b0:92:7e:08:66:98:2b:
         d7:1b:47:19:90:fa:6d:96:16:25:c6:56:76:74:99:bb:73:39:
         0b:76:54:74:4b:21:22:5a:ab:44:9f:01:67:50:e8:5e:f8:d3:
         2b:c4:e9:2a:6d:49:06:f7:03:ef:7f:c6:59:e2:58:91:86:b5:
         bb:af:fd:a1:92:f2:ae:ed:de:32:ce:57:be:1a:b7:69:84:32:
         a3:8e:66:52:1e:70:b2:27:48:d8:3c:ff:35:d3:ec:b1:26:a3:
         78:67:c3:3c:1e:65:c6:ed:7f:31:4f:5f:ac:21:fe:7c:ce:d2:
         b0:b0:df:9a:60:8c:b2:72:5a:c3:58:fb:12:57:23:1f:03:a1:
         fb:61:62:0a:1c:32:da:06:2c:55:e3:58:51:f8:13:43:54:af:
         b4:aa:7a:e9:68:25:71:9d:65:f9:ac:d5:7c:23:38:5f:99:7a:
         7d:85:21:2d:fc:35:23:a7:38:28:c5:9c:b9:22:70:d3:92:ad:
         c7:87:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:17 2025 by rpki-client