Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
File:                     b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa (raw, json)
Hash identifier:          tFOsom+DOU3NocC4KM3npn0hDY7A0XS/wkuR8EOWbWQ=
Subject key identifier:   D4:B6:E0:2F:88:AC:E6:91:58:AD:17:B1:11:2E:91:A5:2F:2C:0D:93
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584ADD668321E9F0CC40E3B42900
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     11650
IP address blocks:        198.46.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:83:21:e9:f0:cc:40:e3:b4:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=ad007b0b-ad17-4567-8c40-db25ebd45f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:69:8c:4a:b2:11:29:99:65:04:91:0b:03:
                    a3:f0:cb:34:9e:87:96:2b:68:6a:00:8d:11:36:c5:
                    90:87:0e:00:a7:f3:62:d6:ce:2e:77:2b:1a:b7:1a:
                    43:78:48:ed:a4:83:a5:e1:7e:b3:8d:6e:69:ca:e5:
                    5b:24:43:df:9b:1d:04:b2:6c:7d:30:81:85:7d:d1:
                    77:65:4d:91:1e:ee:68:4d:5c:3e:16:38:d1:e7:9b:
                    77:61:0b:35:f7:e1:58:7a:25:6a:e8:2b:6a:81:af:
                    63:cd:3f:4e:25:0a:15:b4:14:5a:42:e2:80:d6:e4:
                    60:fd:16:e0:b1:c5:9b:5e:73:aa:0f:55:51:2a:9f:
                    2a:5c:f3:ca:0e:ac:7a:00:91:99:38:5f:f2:72:92:
                    82:ba:04:b8:64:5d:8e:73:c7:2d:91:ca:84:0f:51:
                    f7:19:0a:d7:a1:fd:33:eb:87:e2:f7:56:94:6b:fb:
                    73:1e:fc:86:44:4d:f6:6a:3e:f6:8c:5e:b4:18:d6:
                    28:59:c9:c5:1d:76:d7:e9:f4:d9:2d:4c:c9:ac:0d:
                    ea:21:28:cc:7d:99:53:c9:6c:f1:4d:7e:d6:ac:5b:
                    0e:9b:2b:3e:d2:e0:2b:ab:5b:dc:75:83:92:de:5e:
                    d1:34:fe:bd:28:ac:19:5e:17:96:00:ff:ac:1f:a5:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:E0:2F:88:AC:E6:91:58:AD:17:B1:11:2E:91:A5:2F:2C:0D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:07:aa:0c:b5:b7:5e:71:b2:56:12:fb:fd:7f:d4:45:ca:
         d9:39:3d:cd:6e:c0:f3:e8:95:fd:24:53:7d:ff:11:73:22:30:
         b8:1e:e0:1b:86:44:cd:5b:df:a5:db:2b:64:71:37:12:3a:15:
         85:fa:ac:7a:31:d5:e4:21:08:79:27:12:98:7e:36:e5:cf:e7:
         f9:5a:f7:0c:98:8a:16:df:03:72:37:d2:62:29:c5:13:04:c1:
         05:5b:d4:cf:4d:eb:70:0e:d7:0a:e5:14:3b:ca:4b:86:28:fc:
         b3:6d:99:b6:9b:16:94:83:2f:ce:54:a8:66:29:2f:db:21:0a:
         b2:1d:78:e6:db:09:20:e9:1d:27:aa:62:05:1b:f3:2c:b9:02:
         a5:f6:b7:1e:ca:f5:cc:d2:93:00:e4:c0:a7:a6:e2:c6:df:27:
         2d:72:c9:95:e1:85:dc:d9:99:43:31:44:99:cf:5f:36:10:cf:
         57:7b:ef:6b:24:6a:00:75:08:7f:6e:f3:6d:b9:33:e5:c8:1d:
         05:a0:f8:17:f5:93:c2:aa:a9:91:e9:71:8c:05:c3:4b:af:b9:
         58:96:bc:a0:17:bb:29:2c:4d:b3:f1:a3:2d:28:1c:d6:a5:99:
         10:34:ae:b2:9e:78:b6:aa:b5:4c:a2:d7:eb:03:2c:9c:bb:e2:
         95:ca:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:08:20 2025 by rpki-client