Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa
File:                     8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa (raw, json)
Hash identifier:          1pH9fcBKFYpGctI34IKszfZpYwukGBuIiCpSYs9fb/U=
Subject key identifier:   C7:28:FA:DA:07:2B:78:8C:7F:C4:90:52:60:44:C2:1E:EC:42:7C:0D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584B95A7991618CD62D99083D960
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     8560
IP address blocks:        216.225.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:99:16:18:cd:62:d9:90:83:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=22efbcc5-b112-4f3b-b870-5f68acaf1cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:99:47:f1:50:9c:21:d4:69:da:5a:4f:b4:
                    30:c8:d5:7e:61:38:bf:17:64:a2:91:76:c4:41:8c:
                    6a:92:3e:17:b6:de:da:a8:da:a8:3a:c1:9a:9a:ae:
                    5a:54:4c:e1:e7:2e:90:33:be:a1:c3:7f:7c:33:ad:
                    ef:e0:94:b0:92:3e:3a:91:b6:55:61:7d:92:f0:7e:
                    1d:ca:16:e6:6f:89:32:88:d8:91:d8:67:83:d3:a0:
                    59:5a:bf:f2:85:0c:ce:b0:5a:cc:74:5a:c7:4f:f7:
                    bd:16:29:3c:52:df:0a:53:22:12:33:89:68:f8:82:
                    ef:40:01:37:3f:18:b2:c4:81:6c:00:2e:7a:51:20:
                    07:c4:a6:45:94:35:48:2e:b8:7b:27:99:b0:8f:63:
                    f1:a4:0f:42:d6:6d:39:a0:e8:1b:22:00:74:b0:62:
                    7c:14:15:1f:5c:3c:65:d7:e6:ea:b2:f7:6e:f3:cd:
                    44:14:65:90:34:90:75:93:d6:90:eb:2f:22:ab:6f:
                    29:1a:85:66:67:a7:1d:bc:34:09:b3:03:7d:43:20:
                    c1:71:de:7f:54:f3:80:27:96:02:df:da:82:b1:67:
                    f4:03:1c:f3:e6:a1:b7:bd:7b:80:f6:49:7e:a8:17:
                    ab:c8:f7:46:d0:f8:05:7f:ea:60:7c:0e:88:dd:30:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:FA:DA:07:2B:78:8C:7F:C4:90:52:60:44:C2:1E:EC:42:7C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.225.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:35:ee:ef:e8:4c:e0:fd:45:de:a2:a9:61:ed:96:a5:c9:
         9e:d1:77:fc:bc:7a:bb:65:09:60:04:5f:36:46:8e:bf:b2:d8:
         b6:97:69:1e:4c:ae:71:4d:0d:e8:6b:a9:53:1d:23:cd:f4:4a:
         04:9d:da:bf:86:c9:78:92:1f:11:e2:43:55:14:56:d3:03:cc:
         9f:e0:4b:7b:22:30:bb:75:2c:0e:32:5d:fb:f8:f5:68:68:86:
         b9:bc:f7:41:67:a1:96:e1:29:fa:64:50:0e:d8:1e:a0:55:9b:
         3b:30:b3:f3:67:12:64:3f:68:4c:1b:1e:1d:67:2a:17:e1:4f:
         cb:d1:28:c7:35:a0:2f:f7:3a:1d:3f:84:91:35:65:de:6e:0c:
         70:34:ec:ac:21:b2:99:4c:17:f7:31:09:16:38:b6:77:0e:7c:
         98:ca:49:d5:13:99:07:6f:56:49:56:7f:1c:fe:1d:c9:97:14:
         48:f3:7b:d3:fa:63:10:0a:2b:7b:fa:a1:ce:d7:ee:dd:66:c1:
         9c:2c:95:ea:3f:e3:4a:a0:b0:93:92:c0:fd:57:1a:d4:27:47:
         a3:52:be:ae:ec:2d:5a:30:eb:9c:d7:34:84:66:61:44:0e:32:
         4d:26:21:7f:0a:82:40:50:6d:e2:c5:bc:1d:b2:08:60:17:03:
         1e:f1:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:56:16 2025 by rpki-client