Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
File:                     1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa (raw, json)
Hash identifier:          dXWURbJb0dvSGFeN56H0NyiZs5dOCIUEV7JgziEx9gk=
Subject key identifier:   E5:6D:25:57:85:EC:4E:5B:28:C5:7C:D9:47:10:84:08:93:BF:DB:8E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126F7D3E2698C706C98E180
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     22652
IP address blocks:        216.113.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f7:d3:e2:69:8c:70:6c:98:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=c07abf04-0245-4a1e-a4ed-321860b9b976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:75:70:36:e7:80:6c:01:23:d9:63:4c:e9:
                    00:8c:78:b9:bc:81:92:b0:e0:dc:47:08:8c:ef:d0:
                    96:c9:f7:eb:d9:3f:dd:78:c5:70:d4:d4:57:81:a2:
                    ec:ae:cc:87:00:ce:9d:ff:6c:59:2c:b6:02:0c:40:
                    17:5d:1d:16:8e:3b:ff:dc:14:90:fc:42:82:c7:d8:
                    a0:47:8f:bd:44:91:71:b0:cb:c4:35:81:d4:66:55:
                    6b:28:48:1e:9b:d7:ad:03:bc:15:dc:11:ea:3f:6f:
                    71:64:54:b8:d5:55:66:69:1a:80:11:83:27:7a:a9:
                    00:d9:8f:ef:d2:49:13:51:a0:ed:e8:63:5e:92:29:
                    fe:6e:91:72:4e:ff:66:e5:38:20:2d:58:9c:1e:68:
                    32:8a:da:5e:20:fd:55:32:85:24:d8:65:77:3c:8c:
                    a5:53:32:bc:6b:7d:38:e5:d4:aa:07:9b:37:9d:c0:
                    09:34:1e:47:5d:99:f9:71:e5:87:7f:b3:64:d7:4c:
                    44:cb:f7:04:b8:9e:34:01:e8:10:f2:bc:26:78:68:
                    9b:3d:cc:35:47:00:3d:95:e4:0b:29:09:08:b9:93:
                    34:71:59:3a:45:62:2d:50:61:69:2b:9c:66:7f:85:
                    39:86:a3:9b:07:21:0a:d6:fd:28:3f:d7:0d:4e:fa:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:25:57:85:EC:4E:5B:28:C5:7C:D9:47:10:84:08:93:BF:DB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:73:dd:7f:7f:47:e8:2c:b8:b7:52:65:99:93:30:12:f7:ba:
         ce:c2:7b:f4:f6:4c:82:d7:28:ad:47:a2:59:a7:0e:6b:45:c8:
         f5:3e:7f:98:70:3c:85:fc:56:f0:0d:47:3c:4c:1b:f8:c3:72:
         db:36:5c:9e:46:5f:09:ce:20:2c:19:29:c8:9a:93:a7:d7:28:
         29:c1:d5:7a:6e:ba:8f:06:a5:6e:81:b1:1a:0c:19:5e:92:e8:
         32:bb:ae:27:e9:43:3f:e8:55:dd:ce:64:83:ec:12:6f:34:3b:
         db:91:e6:2b:b4:5c:38:21:d6:bc:59:33:28:c1:a9:85:23:c7:
         5b:26:50:a0:66:16:49:3f:f2:3a:d9:e9:3c:07:d7:c5:12:06:
         ae:b0:bb:cf:f9:50:9d:e7:34:83:7b:a8:45:2d:b1:81:69:13:
         ad:f4:42:3c:24:80:3d:1e:62:78:f3:9c:ad:76:c8:9d:c4:f2:
         47:b2:c0:dd:7f:52:df:e2:cd:66:76:3d:46:62:9e:e1:88:4d:
         64:f2:8d:d4:d6:7b:f6:73:9d:fb:de:2d:91:2b:80:a0:e3:1a:
         bf:fe:a0:21:4c:10:c9:7f:37:01:76:5d:85:ff:66:43:f3:dd:
         04:e4:25:06:da:f4:7e:7c:69:38:92:fa:ba:79:03:22:65:36:
         e0:5a:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:38:56 2025 by rpki-client