Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa
File:                     b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json)
Hash identifier:          22h6dNQTu7Vh2R6gboqW2OUVRsDz6jUhqhKwqVQab6A=
Subject key identifier:   18:9E:F0:19:9F:52:3E:1B:37:37:99:11:08:22:68:56:8C:80:D3:2A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE1DAE4F489E2BFDC917E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        172.253.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1d:ae:4f:48:9e:2b:fd:c9:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8627eb5a-9069-4d54-ad42-c67b6fe29035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:ad:e8:08:4d:b3:05:97:64:51:27:f9:f2:
                    0b:04:eb:df:b9:55:aa:d4:cf:4b:25:77:2b:5b:6e:
                    e9:cc:97:42:32:65:96:23:8b:42:7e:3b:8d:07:68:
                    19:37:82:b8:a5:a0:56:df:ef:ea:ab:b8:5e:4b:6c:
                    6f:02:a0:22:62:c1:f9:8c:7d:52:62:81:26:b2:4e:
                    2a:fe:5e:2c:87:f0:0e:3c:0d:4c:da:21:3a:ca:3c:
                    8b:9d:be:3f:eb:4e:1d:0e:ba:d4:31:92:e6:f4:5f:
                    7d:94:64:f3:e2:74:01:11:12:03:25:dc:80:b2:f0:
                    46:5a:5b:a5:b5:17:89:1e:5d:7c:09:74:00:f2:63:
                    38:0e:bf:5f:fc:ed:84:6c:a5:6b:24:ab:6e:0c:56:
                    0f:59:ce:ba:60:bb:4f:a5:9a:c1:5a:06:7e:1a:98:
                    e6:99:01:f8:cc:1b:36:3e:71:cd:2b:65:33:54:c1:
                    62:4d:b6:16:37:c3:07:87:f0:de:ff:b5:f6:2a:37:
                    6b:21:6d:1c:76:a6:6e:c2:51:77:40:68:a0:08:56:
                    04:70:59:e3:ad:53:4a:52:91:8e:10:6c:87:6c:8a:
                    a8:7a:6b:87:ea:0e:fc:5d:6d:55:c8:11:42:2b:22:
                    16:0c:35:d4:23:f0:3e:9b:33:56:76:57:53:64:c1:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9E:F0:19:9F:52:3E:1B:37:37:99:11:08:22:68:56:8C:80:D3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:72:13:4b:cd:71:c6:21:8c:d7:bf:d7:ef:6d:3b:49:a2:1b:
         c0:2a:65:ec:2c:9b:ba:44:c2:5b:f7:f5:4b:6c:b6:be:68:f3:
         3e:46:27:2d:8f:1e:9a:22:37:b5:f6:58:ee:7b:6e:7e:ab:16:
         8c:ab:40:19:bd:f1:0b:8e:0d:11:87:4b:e9:db:d8:08:b3:04:
         75:3e:73:af:9b:25:30:ea:66:e2:2b:14:e1:85:93:e6:35:e4:
         13:d9:ee:63:1b:fc:77:97:26:50:d5:b4:05:11:ff:5e:b5:35:
         dd:c0:0f:a0:da:21:47:05:1d:de:8a:fd:9b:a8:41:71:fe:f7:
         84:27:b9:9f:ff:27:9e:2a:40:84:d9:aa:4a:17:12:22:1e:35:
         d4:1e:30:d3:60:25:33:fe:a4:f2:6a:ef:e5:fb:02:60:be:09:
         9a:8f:09:0f:6b:b7:e6:76:dd:0a:1f:b7:37:d6:31:09:7d:61:
         6b:64:61:80:9d:a2:a6:2c:24:54:de:2d:65:12:9b:44:d2:34:
         6b:87:58:99:f5:8f:58:54:a6:d5:ec:43:a0:65:50:02:8d:ac:
         a1:7b:74:49:4d:b8:d4:13:fb:f6:06:07:81:33:ef:c4:83:6f:
         7d:f2:cf:db:70:e8:ec:7a:39:1e:6b:1a:91:42:e4:ef:d5:bb:
         aa:0d:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:47:44 2025 by rpki-client