Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa
File:                     947d71a3-710b-3648-8596-79bc276c3c61.roa (raw, json)
Hash identifier:          uauxkQ7HhrKdCZQQDD4eFFGP1fIaau6VSUwz/qI3cFI=
Subject key identifier:   39:8E:5F:CC:83:11:11:0F:A7:EC:2D:8A:71:54:42:91:D5:B5:F0:CB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFFE7361BCA0D06BAC0C53F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa
Signing time:             Wed 27 Aug 2025 21:37:45 +0000
ROA not before:           Wed 27 Aug 2025 21:37:45 +0000
ROA not after:            Tue 25 Nov 2025 22:37:45 +0000
asID:                     31898
IP address blocks:        216.146.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:e7:36:1b:ca:0d:06:ba:c0:c5:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 21:37:45 2025 GMT
            Not After : Nov 25 22:37:45 2025 GMT
        Subject: CN=2016d1ee-c04d-4a9a-842c-153bb57c1e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:9c:3f:02:3b:56:a4:03:92:46:0f:7d:62:
                    1f:b7:d5:de:16:b4:1c:9b:91:a3:bd:0a:94:5d:2d:
                    c5:7b:c0:1e:e7:37:55:2a:83:c9:19:ff:d9:5f:a1:
                    e4:68:c0:e7:66:63:bd:f9:52:8c:d7:cb:70:14:86:
                    54:63:cb:ed:f8:f0:46:d5:3f:f4:aa:24:e9:f8:e0:
                    5d:b8:ed:bd:d0:84:db:2e:ad:8b:3b:fa:5f:d3:12:
                    8a:ca:4d:44:8e:66:4d:37:01:e8:1c:c1:9f:4d:20:
                    a6:2f:e8:08:ec:d5:d0:e0:f6:77:10:60:b6:e2:e1:
                    d0:49:c9:a8:57:0d:b5:e7:91:49:17:07:77:9a:ef:
                    1d:3c:8e:ff:58:02:2b:9b:ce:f0:32:d0:76:28:e4:
                    8f:84:57:05:a4:3a:c5:83:cc:14:5f:ad:76:0d:69:
                    0e:84:19:df:4b:e1:47:f8:96:53:4b:8e:90:79:ac:
                    ed:bf:7e:47:34:a1:9e:14:19:fe:4c:ae:c7:2c:a3:
                    5b:14:b9:15:54:ae:b1:e4:67:27:76:c9:6c:f2:5a:
                    3a:52:dd:2f:3a:67:32:b9:2d:de:f1:14:22:02:19:
                    30:11:3a:b3:59:38:e5:7d:8b:b1:3c:40:e3:59:b7:
                    cb:48:c0:9e:ed:e9:09:62:d5:1b:16:07:33:45:3a:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:5F:CC:83:11:11:0F:A7:EC:2D:8A:71:54:42:91:D5:B5:F0:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/947d71a3-710b-3648-8596-79bc276c3c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:16:e9:af:3a:39:e2:7e:08:43:7d:e9:b6:4f:6c:4f:2b:da:
         da:15:91:fa:5b:e2:aa:89:d5:ef:52:f0:74:b8:d1:d2:bc:a2:
         d2:2e:1a:5b:16:95:8a:dd:0d:2f:21:94:72:d8:38:77:42:8f:
         02:75:50:84:d5:e3:46:b5:78:5e:29:a0:07:d6:a7:ae:41:d8:
         56:b9:90:1c:fa:fa:eb:3f:fd:5d:4f:5e:cf:34:04:35:f5:7c:
         1a:8a:99:41:d9:6f:0a:ac:6f:84:51:1a:b1:c8:2a:36:4a:6e:
         9c:5c:9a:47:a6:43:45:ec:7e:07:80:3c:c8:db:d4:ff:46:f0:
         28:e7:bd:22:21:9c:91:77:13:81:a5:05:aa:65:08:64:7d:fe:
         6b:8c:4a:48:4b:27:39:e3:c2:22:40:fb:47:8a:f2:12:d4:20:
         b5:10:0d:43:de:e4:8a:d2:93:a4:d9:01:df:42:2d:5b:59:1a:
         b6:e8:87:6c:fc:55:49:e6:0b:a0:4c:e4:50:e7:c9:67:a5:66:
         cd:c0:a7:d7:d9:a0:9c:5b:ad:d5:e6:b1:d9:de:a5:b2:89:a3:
         6c:e2:96:56:e5:8b:e9:5a:3a:54:c3:5e:36:01:c6:70:23:4d:
         f7:57:35:ea:03:5d:c7:9e:b6:95:8c:1a:46:97:d6:40:03:85:
         84:f9:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:58:32 2025 by rpki-client