Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa
File:                     7d40b806-6e57-3364-94a7-44f7700041ca.roa (raw, json)
Hash identifier:          ITaG96hIyQJsSumALZhwu7PQ6Ry84/WLjt+RC1Bk4S0=
Subject key identifier:   9B:92:EF:7F:45:80:57:88:2A:33:60:E6:97:13:E8:AC:01:DD:5E:7D
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584B1C36C97CB2C90FE8CCDAAAC0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     23470
IP address blocks:        216.224.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c9:7c:b2:c9:0f:e8:cc:da:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=ecf8516f-db2c-40be-9723-2e1523de08ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:97:6f:c0:16:d1:1d:cf:4e:29:fd:91:09:
                    77:b8:d3:78:c1:51:bd:7b:cd:52:b5:2c:9d:40:4f:
                    43:7b:32:47:3a:8b:af:a6:95:2c:7b:fc:71:b9:60:
                    25:ed:8d:26:7c:21:bb:9a:16:b0:83:96:92:2d:4f:
                    26:2f:de:42:90:d8:72:77:b8:dc:b9:d5:04:13:8a:
                    bf:01:30:93:5d:da:7a:4b:7d:3f:93:94:d2:38:41:
                    e6:c1:a9:03:ed:eb:a0:5c:d9:4c:92:ea:88:f4:cd:
                    e1:67:d7:aa:c4:03:a9:98:71:07:b1:2e:9d:9d:b8:
                    c4:26:45:bd:a8:c9:10:66:c0:a5:73:39:79:ac:3e:
                    07:5d:5a:b6:0f:13:4d:68:41:97:f7:09:df:cb:9f:
                    e1:d2:3f:99:bb:af:d4:cb:61:bb:5c:13:56:eb:89:
                    7f:b1:8c:a8:97:05:a1:6f:82:fd:6a:2d:1c:a7:5f:
                    a8:9d:b9:fc:40:f4:d9:b4:67:b5:51:5e:f3:b1:0d:
                    23:83:4f:8f:ee:0a:49:30:b2:e3:d9:8e:36:f7:6d:
                    ae:eb:c6:a8:31:71:62:2e:db:16:99:a6:6f:c2:be:
                    45:2c:54:8a:f0:10:fc:e4:ba:f4:5a:ae:7f:67:cc:
                    6d:a4:b5:cd:fa:3a:22:ba:42:9e:9a:cd:4b:e4:34:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:92:EF:7F:45:80:57:88:2A:33:60:E6:97:13:E8:AC:01:DD:5E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7d40b806-6e57-3364-94a7-44f7700041ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:30:8d:f5:c3:31:2b:c0:14:5a:83:6d:0d:29:22:6e:05:
         2a:85:9e:c3:0e:c8:ee:bc:87:46:be:43:6b:44:e4:ba:c6:4e:
         95:06:19:16:0d:47:41:44:98:62:f8:29:5f:6a:a5:b5:0a:91:
         9a:0a:e8:86:a9:f9:34:78:9b:e5:6b:63:bd:07:80:c8:8b:d1:
         64:a1:b1:49:d8:5d:e7:2f:a4:ef:97:82:f9:ba:ef:be:87:4a:
         10:58:db:74:58:8f:12:d5:3d:7b:2f:18:5c:5a:28:40:f7:df:
         d7:f6:8e:a3:26:e9:86:fe:fb:ea:51:de:0a:cb:1f:6c:b3:56:
         f1:3f:8d:30:7c:5f:20:cd:e8:7b:bf:25:eb:76:3c:1d:65:06:
         32:30:28:ea:c9:49:93:37:cb:06:41:1c:9d:f7:48:f7:2b:01:
         92:7b:c6:8b:22:f5:78:c7:9c:7a:ac:1b:39:b3:f8:27:af:53:
         ba:d8:db:8e:4b:fd:f5:a7:c2:71:8a:88:a2:41:07:46:f6:59:
         49:49:6a:ee:be:ae:2f:8b:42:d0:46:2f:95:75:5e:c6:7f:1d:
         20:5c:78:9b:04:e2:28:58:0b:0b:8b:22:e3:aa:85:2f:3e:82:
         42:3c:f5:81:ef:5c:4d:ed:ca:ca:bd:e8:8c:f8:3d:c6:f3:31:
         fc:9e:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:51 2025 by rpki-client