Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/eb798324-b97a-3af5-82d4-754389de7bd5.roa
File:                     eb798324-b97a-3af5-82d4-754389de7bd5.roa (raw, json)
Hash identifier:          Jd7COfiV6gTu7Ic3tXrfiwNqLjCCx9UuuGycf9lHVRg=
Subject key identifier:   1F:15:FF:56:9C:DA:3E:F8:9F:CD:E4:05:97:99:E0:75:B6:D2:FC:F6
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584B4D11E26B15D191EC514EE180
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/eb798324-b97a-3af5-82d4-754389de7bd5.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     401415
IP address blocks:        216.249.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e2:6b:15:d1:91:ec:51:4e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=6dc7e10a-ac3e-4219-b88c-93b5c1821151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:54:5b:99:c6:fd:67:2d:8f:23:d6:6c:71:
                    21:1d:4f:56:70:ea:eb:09:ff:8b:dc:ac:c4:2a:27:
                    81:97:da:43:77:99:83:53:72:6a:08:68:5c:5a:bc:
                    36:67:9f:3f:35:d4:89:3c:fe:19:8e:7a:f2:0e:8a:
                    46:c4:99:0f:65:66:d6:39:ed:3f:f7:8b:f4:86:2f:
                    a8:71:e3:03:57:b0:28:1f:d0:45:0c:1c:e3:89:58:
                    c0:ec:13:8f:8a:7c:54:7b:28:e5:c1:10:c3:1f:aa:
                    73:66:0c:ea:47:71:9a:2b:35:c1:e3:e4:51:4b:a8:
                    95:24:21:77:db:2b:53:be:41:d9:07:da:98:b6:4b:
                    b2:98:5e:5b:e0:57:18:31:1e:23:a8:d7:36:1c:13:
                    16:ea:58:d3:f3:4e:8c:3e:7e:30:e7:61:5f:f5:ff:
                    74:bf:f2:03:22:6a:b3:6a:5a:44:41:75:50:a1:ba:
                    05:42:ef:e7:fe:2c:1d:54:7e:c1:72:32:df:c6:a7:
                    e4:13:cb:8b:e0:71:53:75:07:84:55:23:4c:1f:c5:
                    b7:0f:57:6c:93:d5:17:34:ef:d5:e9:61:ad:e5:bc:
                    2a:ef:99:57:2c:89:b5:00:a3:15:3f:45:0f:8f:fb:
                    5e:34:87:07:f6:1b:da:3c:13:e4:db:c9:64:45:f5:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:FF:56:9C:DA:3E:F8:9F:CD:E4:05:97:99:E0:75:B6:D2:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/eb798324-b97a-3af5-82d4-754389de7bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:4b:cc:1f:35:4e:b4:6b:dc:32:00:0d:5d:6a:cd:7c:69:
         ed:24:d0:29:58:e1:02:a8:ae:08:5d:7f:c1:cf:e5:41:6c:53:
         7b:2e:48:3f:69:c0:97:38:6a:e8:00:9a:5a:df:92:af:fe:83:
         b6:a4:8d:59:68:8b:c1:09:73:b5:41:d7:f6:4e:60:0e:79:e7:
         7d:d8:e0:17:67:bd:99:88:fa:12:27:87:a8:9b:7d:07:e8:b5:
         73:fb:37:0e:61:25:68:eb:59:85:0a:9f:93:7a:89:d7:15:42:
         c8:a2:85:5b:50:74:44:ec:7f:7b:25:83:e4:d8:81:83:04:c8:
         de:45:78:ef:80:f1:10:a5:ac:62:3e:74:23:14:bd:0a:68:c0:
         90:0e:c7:0e:5d:58:17:0f:0b:07:68:02:b1:4d:4c:ce:47:95:
         c7:a3:bc:1f:4d:73:2c:aa:f4:a3:e2:cb:55:a7:dd:e7:f1:cb:
         95:6b:35:bf:91:cb:56:52:c7:c7:3d:84:c4:79:43:2a:ad:19:
         24:2a:a4:64:53:05:cd:47:a0:54:63:e4:29:43:5b:a2:34:ac:
         52:8b:cc:29:b1:ef:a7:7e:67:4e:1a:b8:fe:d8:fe:a5:6a:43:
         c5:41:0b:b5:cb:e8:43:c2:79:b4:66:4d:0e:a4:75:4f:3b:2f:
         e3:f7:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:03:40 2025 by rpki-client