Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa
File:                     62403efb-353b-3b4c-9028-462b0298549f.roa (raw, json)
Hash identifier:          rI4FYN7k3m4MUoBgothEBvFhTLvCe/9D7PN0uw44zp8=
Subject key identifier:   22:25:D5:33:28:39:4E:66:0A:2D:2A:2D:67:C3:94:F3:52:BC:8E:D7
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F4328584AECC1242C9DA9707F0EEFDEC0
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     40501
IP address blocks:        216.235.84.0/24 maxlen: 24
                          216.235.86.0/24 maxlen: 24
                          216.235.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:24:2c:9d:a9:70:7f:0e:ef:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=cc9b61e2-14f1-4064-879f-0d93e4fb43ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:da:4b:15:63:b9:21:ca:7c:09:b4:99:bb:
                    8a:d8:f9:0a:bc:b5:00:b7:8c:47:2e:29:17:f4:be:
                    af:88:e6:c0:c7:a5:d6:43:e7:82:8b:89:00:74:e8:
                    ca:fb:cb:8a:3b:4a:a8:e4:12:6f:17:70:28:31:1d:
                    f2:0c:de:09:46:f5:eb:38:78:43:d9:9a:5b:87:49:
                    26:c0:1d:a6:64:c7:7b:6f:a0:3f:50:66:a5:6a:74:
                    a8:e6:65:1c:0b:51:7c:ff:79:a6:92:83:63:58:f8:
                    ad:95:f1:ce:f1:63:42:4a:47:60:ea:76:3f:ab:8f:
                    7c:a0:cf:50:d1:04:ba:2d:0f:81:0e:88:c0:4f:9a:
                    b4:14:f3:97:f3:1d:ea:c8:6a:f9:3e:79:26:ff:3f:
                    15:18:4e:7e:e2:9b:9e:8c:06:e4:bf:2e:be:6e:38:
                    63:3f:17:c9:41:c9:22:99:b0:03:0c:22:26:d1:4e:
                    54:e2:c3:43:ea:8a:be:a8:be:f3:0a:7b:80:2c:5d:
                    c4:75:9a:7a:e6:db:ca:15:a7:ea:6c:80:2f:69:f1:
                    98:6e:c7:9a:4c:0f:aa:29:c0:fb:3d:01:49:69:f3:
                    f4:d4:15:8b:fc:bb:d1:50:b2:df:eb:bf:2f:6b:9c:
                    00:a3:83:23:ed:c0:ca:ae:0b:ae:32:3f:18:72:9e:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:D5:33:28:39:4E:66:0A:2D:2A:2D:67:C3:94:F3:52:BC:8E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/62403efb-353b-3b4c-9028-462b0298549f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.84.0/24
                  216.235.86.0/24
                  216.235.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:52:fb:2b:00:8f:a9:05:e4:98:51:90:bb:04:a1:84:44:43:
         50:59:17:1a:b7:3a:db:66:f2:22:d4:d0:9d:ae:40:ca:bd:d9:
         c1:ae:20:6f:73:8b:fd:40:67:7f:f4:14:74:16:65:11:c5:09:
         82:f7:55:d2:f8:4c:74:be:67:68:0f:26:b6:aa:90:ae:86:e9:
         24:9b:28:88:17:f5:f1:f3:30:64:ba:05:35:ca:a4:48:52:86:
         8c:dc:9b:fb:1d:6f:11:f3:53:4e:d1:8d:94:45:50:5f:72:16:
         20:d9:bb:c5:64:2d:ce:5e:05:2c:6a:19:4f:8d:fc:4e:fe:b6:
         0e:26:a7:ed:01:78:ae:7a:6c:a4:59:ed:9d:43:c4:5b:39:f5:
         16:a5:1b:63:87:62:f0:ee:1b:da:70:cb:57:9c:2b:bf:0c:45:
         ec:0d:17:9f:e8:0e:d2:90:ff:76:54:39:04:10:51:fd:28:05:
         86:68:95:50:14:e6:d7:1b:7d:de:b6:aa:10:b1:35:b6:b5:cb:
         c4:a8:18:6e:9d:43:58:61:12:2e:1e:65:ef:9f:37:10:7b:d0:
         65:5a:f0:e4:28:58:89:64:60:3e:90:9e:2f:6a:d6:1b:66:d4:
         89:ac:43:ef:1f:e6:7f:7a:26:64:5b:66:b3:25:c5:6b:8c:fb:
         51:9c:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:56:48 2025 by rpki-client