Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e761e9ca-5048-3a20-b65f-86e060450afd.roa
File:                     e761e9ca-5048-3a20-b65f-86e060450afd.roa (raw, json)
Hash identifier:          st9CyQ4d/Pu7uuhyjM983h7U+gKhs97F85tQOAAWtcI=
Subject key identifier:   02:5A:CB:89:1F:C1:62:55:96:B8:DB:C3:2F:3A:8B:69:22:D7:26:81
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16CB796AFE3963C3B1F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e761e9ca-5048-3a20-b65f-86e060450afd.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        198.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6c:b7:96:af:e3:96:3c:3b:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=12ac22e3-af26-4a83-ae6a-ff71554ae446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:e1:48:af:0f:63:2d:d0:6e:4d:77:d9:ec:
                    51:f8:1d:51:26:58:3f:07:58:09:2f:b7:da:0d:56:
                    6d:cf:75:8e:6e:54:79:35:3b:73:81:a8:98:71:ae:
                    ad:e5:78:c1:18:1f:3d:89:3b:71:19:b5:c4:92:d7:
                    3f:4c:8d:b2:52:aa:e4:4c:52:82:0c:bb:e0:a1:91:
                    b0:d3:6a:e0:c7:34:5e:dd:86:eb:a1:c0:3e:a8:a1:
                    33:4f:00:96:4d:49:19:c9:73:ae:83:0d:38:d2:79:
                    19:18:5c:14:f2:f3:55:30:37:6a:53:37:08:41:c0:
                    01:e2:db:d9:bd:eb:0a:da:bb:f9:e0:28:f9:d7:72:
                    1d:de:7c:c4:4a:98:47:eb:3d:58:7d:3e:19:f1:09:
                    43:c0:29:43:b4:40:0a:40:5d:03:80:3a:91:3f:c4:
                    f2:ce:89:a7:8e:fb:f1:e9:5d:b9:91:ea:71:d0:57:
                    66:d2:b1:05:00:05:93:d7:fc:f9:43:b4:8b:c1:d5:
                    74:83:bf:58:ef:9a:1a:de:c0:ca:c8:7a:c7:c6:e7:
                    37:86:3f:3d:bb:3b:a7:bf:f5:24:63:22:0c:8d:e1:
                    e5:97:79:1c:e0:dc:35:72:f5:e6:50:8d:44:04:c2:
                    50:10:be:f9:91:c9:3c:fc:68:a9:0c:a1:21:18:67:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:CB:89:1F:C1:62:55:96:B8:DB:C3:2F:3A:8B:69:22:D7:26:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e761e9ca-5048-3a20-b65f-86e060450afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:0b:d0:93:db:0e:b2:36:8f:d1:cb:98:ce:67:ab:43:20:
         36:9c:71:3e:5d:17:9e:d2:4a:4b:dd:60:ff:75:c9:24:89:c7:
         27:d1:28:28:c8:0a:ed:ee:c5:1a:c5:b1:c1:20:c7:84:f1:ff:
         5b:77:70:ff:96:c6:ea:e6:96:d1:f4:4c:37:0c:68:97:e6:fd:
         71:16:8d:c1:48:b4:67:2b:01:bf:ee:2d:29:35:39:c5:98:43:
         7b:f0:6a:c5:60:d6:0b:f8:1b:07:cb:17:42:ef:ac:c6:ee:7f:
         84:ec:d2:a8:e3:84:38:c4:fc:ee:96:64:2e:97:8c:21:55:f7:
         3e:51:14:2e:0f:5e:38:1a:d3:d1:c1:fe:33:77:8a:4e:f1:79:
         b0:28:f1:5a:4f:94:b5:dd:67:b4:58:32:cd:6e:bf:11:41:ea:
         93:21:87:6b:7e:ac:c3:04:ef:6f:9e:be:9f:37:f7:95:8e:72:
         3d:6f:ac:3c:79:5d:5f:f1:08:4d:c3:8e:6f:2e:83:53:02:de:
         b4:65:65:a8:0a:13:1f:3e:da:c8:e1:29:9b:ea:f9:72:bc:d8:
         64:d5:24:f3:a1:3c:37:e0:d4:24:9e:70:da:1b:a3:52:92:59:
         57:62:12:6f:28:dd:8d:e2:71:5e:62:d0:19:21:3b:82:db:b3:
         d2:81:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:23 2025 by rpki-client