Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/002cd7f5-2a93-3daa-94a6-8b03fcbf3193.roa
File:                     002cd7f5-2a93-3daa-94a6-8b03fcbf3193.roa (raw, json)
Hash identifier:          HrR9i3I5TiVq8lWGgqkm2Hpc8LoeGToJzQFWRzn/djM=
Subject key identifier:   F6:3C:CE:18:18:89:D7:F9:37:CD:95:79:89:AB:47:B9:E1:3B:5D:49
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B0746B09280A0A402ED498940
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/002cd7f5-2a93-3daa-94a6-8b03fcbf3193.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     174
IP address blocks:        216.24.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b0:92:80:a0:a4:02:ed:49:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=3af76dcc-86a1-465f-be40-b171e87b820f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:f0:b3:12:6c:49:ab:ff:cc:50:7d:6d:7a:
                    f1:ed:9d:6d:62:bd:65:0f:86:71:25:79:0c:71:0d:
                    e5:0f:d4:ab:2b:12:b5:7d:0b:44:e6:07:3a:b0:4a:
                    e3:3f:6e:09:aa:db:47:85:5a:ea:e6:62:45:9c:b2:
                    69:be:5a:33:af:e6:04:34:fa:2b:e5:54:e0:79:7e:
                    8d:cf:71:62:53:4d:39:9d:53:1f:3b:d9:1e:21:ac:
                    5b:6f:8a:5b:0c:dd:93:27:0f:5d:69:1d:88:55:d6:
                    72:16:51:fb:11:fe:01:65:c1:bd:0c:ca:51:af:b2:
                    dc:d6:00:e8:f0:9a:c7:1e:00:d4:54:77:ae:c4:70:
                    d0:04:ca:98:97:50:32:ef:d6:f6:ae:4c:49:0f:67:
                    42:3e:7f:de:06:4b:90:16:b8:f7:2f:c8:8e:04:32:
                    1f:21:13:cc:38:9a:53:38:09:5f:c5:c2:6a:ea:ab:
                    b8:be:0c:b7:4b:1a:cb:a3:e5:3d:61:09:2a:27:aa:
                    a0:13:f0:09:bf:e9:a3:fb:77:dc:ef:27:0f:61:78:
                    80:f3:17:e0:53:0b:b2:d5:1a:21:c9:48:54:74:04:
                    5f:65:6f:b6:ed:36:4f:57:60:c9:b6:35:f7:05:6d:
                    43:f1:e3:6b:90:a8:82:08:cf:79:dd:bf:0b:68:4d:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:CE:18:18:89:D7:F9:37:CD:95:79:89:AB:47:B9:E1:3B:5D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/002cd7f5-2a93-3daa-94a6-8b03fcbf3193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:55:9f:fa:2d:02:58:fc:8b:8d:b8:39:4f:3b:c2:30:c0:40:
         01:49:cf:83:5f:7d:03:ff:03:09:38:40:ca:ee:32:1d:08:89:
         66:44:ab:41:73:46:e8:51:a0:1a:a6:c7:c9:80:78:0f:fe:df:
         d4:34:52:52:a9:8d:44:f6:9c:88:6a:f2:c9:71:7a:23:42:c6:
         10:2e:b0:c6:a3:b7:59:aa:f5:e3:64:6a:9d:ed:13:70:f4:86:
         22:dc:05:29:e9:1b:bf:b0:d1:86:86:61:0a:1d:76:f4:ff:c9:
         ff:72:a3:1d:33:c4:a5:44:b5:cb:ac:9e:8b:e9:10:5e:5a:72:
         af:6a:55:a0:36:a7:fa:69:32:fb:3a:26:0e:ec:5d:80:17:73:
         e1:32:90:37:43:f4:b9:f2:4c:94:3f:38:e9:c3:e9:4a:21:cb:
         af:31:2a:87:5d:33:0a:b0:bc:ab:96:9a:da:08:d9:93:e6:2b:
         00:8a:77:04:5d:1c:47:e4:7d:da:2c:c8:b0:20:c3:d5:e7:fd:
         90:27:4a:a3:41:cc:d2:7c:3d:76:c7:74:d2:7a:b9:87:d4:ec:
         df:74:8d:a3:04:fb:6a:04:4a:e9:0a:22:74:3a:f9:b6:85:f5:
         fd:8a:a7:c0:d1:8a:42:0e:2e:0b:b6:3f:2e:49:46:8d:a6:fa:
         97:e1:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:11:28 2025 by rpki-client