Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa
File:                     27681493-a8a9-3015-afde-7a0187aad668.roa (raw, json)
Hash identifier:          miSjgrQRa98t9v8YRAip9yuA1L6Id5vivJr1DA13eEU=
Subject key identifier:   E0:4A:9D:D0:1C:23:56:2B:B4:DE:70:65:46:36:FF:FF:98:1B:AA:8F
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584B13D6AF78D1ACA1880B0697C0
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        162.247.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:af:78:d1:ac:a1:88:0b:06:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=7057d97c-3e13-40e8-99a9-8a054dd4de94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:ea:7e:cd:79:eb:18:fd:14:fe:74:d1:fb:
                    47:dc:f4:47:67:d0:63:d9:cf:ea:4b:07:a8:a7:2b:
                    18:fe:0b:95:4c:f8:4d:e9:69:32:b3:87:36:f9:e1:
                    b4:2d:d3:eb:5f:77:13:85:68:33:51:4d:d1:ed:bf:
                    b0:ac:56:36:a1:dd:ee:fc:a3:5a:bb:95:1a:51:95:
                    47:4b:bd:f8:3d:89:8c:00:e5:53:4a:4a:a6:28:60:
                    d2:e8:0f:1b:40:2d:9f:11:1f:e3:da:7c:20:ba:60:
                    e7:fc:7e:08:c2:39:9d:ad:fa:4d:a6:79:43:bb:6b:
                    b1:fe:42:5f:3b:ff:67:02:f2:3e:63:e5:ad:fa:99:
                    38:b4:42:87:08:aa:de:23:1c:c1:c5:c7:18:c6:24:
                    6f:df:d4:a4:2a:9a:0f:f3:fc:6f:2b:da:e8:43:17:
                    b5:2b:ec:c8:e5:ac:d7:f1:f9:c4:f6:c9:70:70:92:
                    b8:92:d5:fa:ff:93:fc:3e:6c:d5:f7:0d:b2:cb:d2:
                    a7:3a:d7:67:91:8b:9a:de:99:b9:35:5f:7f:5e:57:
                    95:44:1d:58:1c:fb:60:ee:78:ad:d8:b4:c6:d2:85:
                    3e:20:4a:1a:c3:35:dc:93:69:df:01:90:09:4d:00:
                    c5:c4:cb:11:71:9c:9d:0d:91:4d:0d:db:d3:9d:32:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:9D:D0:1C:23:56:2B:B4:DE:70:65:46:36:FF:FF:98:1B:AA:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:f7:93:27:b8:c0:6f:14:91:40:5d:de:3b:91:dd:6f:d5:
         d9:5c:9b:f4:fc:92:38:e0:83:48:48:b5:14:7f:c4:18:59:3e:
         e5:d4:45:44:46:9a:30:22:6b:23:18:e5:fa:5e:58:27:92:72:
         54:80:7c:92:de:17:e0:3a:37:97:07:6d:88:25:a2:ba:68:f4:
         09:32:14:b1:9d:8e:15:28:c4:b5:c2:9a:06:9e:9d:7b:6b:1e:
         77:4f:ca:f9:d1:c0:68:53:c7:27:ce:47:e5:af:d4:24:42:4f:
         1b:74:b4:e6:8b:99:09:64:35:ca:ce:57:d1:a5:a9:d1:e4:b1:
         9f:20:cc:63:a4:01:af:d1:c9:1c:f3:2f:0c:69:80:ea:72:fb:
         3f:65:e2:35:b8:b6:ee:a7:40:15:85:16:62:dc:cb:a1:69:76:
         eb:19:49:d2:ef:aa:8a:76:f7:9c:49:93:d5:f9:96:86:7f:92:
         6f:f5:a0:d9:fe:77:21:69:88:b0:bf:15:eb:de:06:e2:3a:9a:
         04:4c:aa:98:f3:40:38:68:de:42:97:6c:07:76:7e:67:a0:03:
         03:9f:0c:b0:8e:82:06:84:34:2f:83:23:76:89:73:a1:e2:ce:
         1f:1a:b2:85:96:68:5d:a1:c5:d6:d9:73:25:c2:41:f3:8d:12:
         64:dd:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 14:59:43 2025 by rpki-client