Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa
File:                     bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa (raw, json)
Hash identifier:          WyTuogRFza4+lldPk+r5UvTvM0cfugG+73wn4bhEKro=
Subject key identifier:   A3:0C:7E:F9:47:5C:E9:3C:1F:82:EB:08:09:40:FF:7F:46:D8:69:19
Certificate issuer:       /CN=48416e40-8d51-4528-a6af-36dd93cf14ee
Certificate serial:       010D0C9F4328584B3171FB753FEBBED787803A80
Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa
Signing time:             Sun 14 Sep 2025 15:31:58 +0000
ROA not before:           Sun 14 Sep 2025 15:31:58 +0000
ROA not after:            Sat 13 Dec 2025 16:31:58 +0000
asID:                     30625
IP address blocks:        208.66.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:71:fb:75:3f:eb:be:d7:87:80:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee
        Validity
            Not Before: Sep 14 15:31:58 2025 GMT
            Not After : Dec 13 16:31:58 2025 GMT
        Subject: CN=3e002022-310f-43de-86d8-e43b12e42c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:31:1c:de:f5:5a:55:e4:9c:81:3b:f3:d5:
                    e4:2a:04:55:3c:b3:66:92:be:a7:35:b7:00:90:c2:
                    85:25:83:c8:e3:99:13:0d:58:64:82:2d:c5:b1:d4:
                    cf:b7:88:11:2e:b8:15:be:f5:96:76:59:3d:72:6d:
                    87:32:dd:6a:60:a4:62:fd:03:6a:34:ea:23:82:d6:
                    9f:6b:10:76:de:5c:8d:15:c0:21:cb:96:60:0e:5a:
                    60:d9:3e:90:08:0c:97:6f:ce:e5:f5:2e:48:0f:8c:
                    50:9a:ef:22:b6:de:de:97:82:1d:68:c1:34:cd:36:
                    7c:72:5e:20:2c:9c:73:a9:7d:6f:a5:97:50:ac:f0:
                    68:10:5b:84:09:fc:b3:04:78:2f:d3:06:76:8b:a5:
                    8f:7a:65:9f:ad:34:e3:69:3f:93:89:7b:e7:4f:3a:
                    eb:42:51:b9:33:5a:4d:a2:b1:46:d6:9f:4e:3b:d0:
                    a5:60:da:db:5d:e5:23:ff:52:c7:88:6e:f3:73:dc:
                    25:23:ff:db:83:19:d1:2a:f1:08:66:32:76:84:ef:
                    7e:55:fd:1d:32:29:7c:c0:bd:2f:d4:40:32:76:04:
                    41:b6:4c:30:66:3b:3c:85:70:91:03:15:05:5e:9f:
                    6a:5b:f9:28:6d:c9:9a:ab:ce:38:e9:3b:f3:45:e4:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:7E:F9:47:5C:E9:3C:1F:82:EB:08:09:40:FF:7F:46:D8:69:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl

            X509v3 Authority Key Identifier:
                keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:7b:64:a2:60:f6:46:5c:c8:78:ae:1c:78:85:e5:d3:2d:
         90:76:d9:50:fd:48:be:c5:74:26:1a:54:99:1f:3e:b8:a2:1b:
         55:5e:35:fe:ed:56:b5:8a:6f:2e:5d:f9:20:b8:6f:74:9f:20:
         6a:27:3b:8f:3d:d8:40:3e:ee:5e:04:33:c3:cd:47:ee:82:79:
         ca:b5:7c:0e:a0:7c:ab:5a:ce:3b:98:aa:53:72:17:fe:2c:1b:
         b2:5a:b8:c6:56:76:93:40:76:0f:12:28:74:08:53:53:c0:f8:
         f6:96:ff:14:25:dd:5e:87:e8:27:fc:07:b6:3a:6f:79:be:bd:
         8f:68:d7:8a:69:c4:55:5e:1b:4c:0c:50:cb:25:fc:d0:b3:32:
         d6:83:4f:ad:50:68:5c:3b:cd:e5:af:6d:7a:47:67:e6:d4:89:
         1b:bd:20:c4:6f:ed:67:c7:4f:a4:e8:0a:bb:22:6e:4b:35:82:
         96:01:1d:1d:82:28:8c:0f:cf:68:7e:52:5a:7c:04:9e:e2:b5:
         ef:c5:b2:3b:4f:7e:97:cf:d0:1a:42:54:fd:41:87:60:2c:b2:
         6c:c9:a7:c3:20:9b:06:3b:e0:4c:1b:14:85:47:f4:26:33:36:
         d3:da:9b:de:68:f5:1d:99:45:bb:97:d2:bd:98:a5:f0:5e:1c:
         c7:af:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:13:13 2025 by rpki-client