Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa
File:                     654420ad-2cd4-344f-8fc5-b9688fcc1160.roa (raw, json)
Hash identifier:          2FD3McIJpEArHAEJb4DVkfKmJkcszioTVGCepa0gjkw=
Subject key identifier:   09:53:9D:35:CF:59:5C:A8:37:58:B9:11:C8:BD:12:0E:1E:D0:74:9D
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584AE5C670D27C60523AF32D36A0
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     174
IP address blocks:        216.98.249.0/24 maxlen: 24
                          216.98.250.0/24 maxlen: 24
                          216.98.251.0/24 maxlen: 24
                          216.98.252.0/24 maxlen: 24
                          216.98.253.0/24 maxlen: 24
                          216.98.254.0/24 maxlen: 24
                          216.98.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:70:d2:7c:60:52:3a:f3:2d:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=f61acf92-06f9-42e6-bffc-08d37cf56101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:6d:76:92:24:ce:d4:6f:59:35:95:84:d3:
                    be:40:fc:a5:96:cd:d0:67:9a:cc:96:94:28:19:52:
                    09:d0:ad:87:1e:ee:25:36:e6:25:b3:ed:42:6c:0b:
                    7b:6d:25:a2:63:42:cd:d8:8b:e8:19:c6:a0:f6:6c:
                    4a:4f:67:9f:d5:e3:be:9d:43:00:63:c0:83:6b:78:
                    ce:37:a6:76:74:cd:09:9f:90:dc:62:f8:9d:7d:86:
                    6f:81:25:20:5c:e4:ae:4a:02:36:bc:3d:47:48:9d:
                    e3:9b:2b:6b:06:a1:e0:b0:6b:a3:f7:0a:bf:36:cc:
                    cf:f9:1e:87:31:31:65:3f:68:ef:02:3b:da:90:1d:
                    de:41:a0:ac:f2:11:7f:89:22:ac:9c:bb:dd:e1:78:
                    0e:d3:a6:75:34:2d:65:b2:5d:9b:8d:7d:c8:ec:5d:
                    d7:40:c5:7b:3b:c2:1f:8b:8c:3b:56:69:70:e5:c6:
                    dd:de:07:64:19:67:5c:5b:b8:26:ad:3a:80:2f:f6:
                    31:47:e4:be:a1:2b:00:e3:52:8f:30:b1:99:a1:08:
                    a3:65:0a:9c:4c:cd:91:6f:33:66:9e:a2:7f:c1:9c:
                    8d:4d:7f:39:b8:d6:7a:e3:cb:9e:cc:c5:4c:3f:aa:
                    86:21:82:79:fc:54:24:3a:86:a0:4e:4c:60:d0:11:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:53:9D:35:CF:59:5C:A8:37:58:B9:11:C8:BD:12:0E:1E:D0:74:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/654420ad-2cd4-344f-8fc5-b9688fcc1160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.249.0-216.98.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:0f:76:b0:8d:0f:64:f6:b1:e9:65:66:dc:16:78:63:2c:
         e1:5e:d7:87:22:59:6d:0b:c2:7a:76:8b:d8:8f:06:05:87:0a:
         d3:86:58:ae:fa:63:9d:0e:00:f1:ef:87:c6:5a:5a:30:01:07:
         8a:f4:86:a2:59:16:a9:ce:61:da:3f:a4:7c:f3:b7:d0:86:0f:
         9c:33:26:ea:58:e7:bb:29:8b:fc:85:d1:0f:23:d0:7e:c5:19:
         ce:c1:dc:e3:ce:ec:17:1c:21:10:53:92:81:95:ec:c8:6e:db:
         60:10:35:47:15:7d:34:76:ce:a0:c1:3c:d2:be:f7:01:b9:e0:
         79:19:12:09:21:df:6b:5e:4d:ce:38:3e:0e:f0:50:6c:6d:d8:
         15:23:9c:eb:b8:45:fd:cc:3a:ec:48:14:ae:eb:75:4c:35:b1:
         43:62:64:5f:b4:a1:1e:cc:44:d0:f2:dc:66:4c:29:63:a5:ed:
         14:70:cb:c9:01:28:de:22:70:cb:81:ff:16:4d:76:de:0d:6d:
         04:25:86:9e:7e:82:8f:e9:88:6e:8d:a1:ad:00:c6:34:77:47:
         1d:97:6f:0b:76:1e:c8:75:cd:e9:4f:aa:36:49:da:58:0a:8b:
         e3:87:89:4a:0d:99:5e:07:3c:f3:3c:f3:14:04:73:5d:d0:76:
         f9:ed:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:38:24 2025 by rpki-client