Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
File:                     d032a8d4-77d0-39c1-86bb-5584ef9af130.roa (raw, json)
Hash identifier:          EdVqwL54lySK8Bt5CTfMujEBb44/bdbMTqa9Pzv3fSk=
Subject key identifier:   C5:D4:59:D1:3E:41:66:77:3D:57:63:15:B8:53:01:E5:6D:0B:40:73
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AF5215373BB5649D11570AE40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     212238
IP address blocks:        216.107.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:53:73:bb:56:49:d1:15:70:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=5140fbb8-628b-4454-a7f1-8a528048e3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:f6:40:5f:92:64:b7:2f:58:18:d9:7e:83:
                    a7:9c:5c:31:1a:50:b0:d6:59:4d:2a:82:10:1f:b0:
                    74:5d:5e:77:17:82:6d:88:28:ba:17:97:94:ed:48:
                    ed:2e:ff:e3:2b:8c:7b:44:e6:32:c5:d4:83:86:2f:
                    a7:a7:d0:f7:d3:00:2a:63:f4:d4:57:3e:94:5a:f3:
                    31:cd:12:d5:84:3d:b1:0f:39:fb:cd:17:e4:1a:4a:
                    f5:32:72:80:30:e1:6d:ca:d4:f4:a1:d2:03:9a:42:
                    f2:d6:14:41:e0:35:35:20:2a:6c:07:c5:ac:94:e3:
                    71:36:1b:aa:00:cc:fc:2f:10:c5:68:70:8d:53:12:
                    55:89:26:5b:64:5d:1b:34:59:e5:94:e8:df:77:d8:
                    65:10:5f:68:b3:c4:2c:7d:30:39:ca:f0:cf:13:f0:
                    51:8b:83:76:95:12:7a:1c:bb:e1:f6:01:c8:22:0b:
                    9e:d7:c4:a3:ff:e0:77:d6:4a:6d:af:31:92:13:7e:
                    5f:e7:92:ac:b0:e9:02:6f:3a:ae:3f:88:70:67:d9:
                    6a:37:c5:29:86:9d:c1:bd:7f:a6:70:2a:e1:c9:09:
                    02:3a:27:87:86:0a:43:49:d7:75:ae:40:fb:a7:2f:
                    98:5e:98:b5:fa:2e:7e:6e:6b:7b:d9:48:bc:a2:4a:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D4:59:D1:3E:41:66:77:3D:57:63:15:B8:53:01:E5:6D:0B:40:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:38:6e:ca:c5:46:12:11:be:9c:1f:1c:ba:0d:44:d8:4a:18:
         f4:b9:e2:63:b9:71:f7:e9:d4:de:4b:d8:bb:b5:da:0e:d1:c6:
         04:ab:c1:fa:6a:b0:3e:98:d5:26:25:9b:a2:f5:ba:5e:09:a1:
         2f:38:ca:e8:42:f2:69:ad:d3:54:c0:19:ae:18:08:64:73:69:
         e6:3d:b7:9c:b6:c4:c1:17:2e:a3:cc:d5:9c:2a:e9:c3:79:eb:
         a8:cd:44:6b:86:66:5f:58:c1:74:c6:d8:83:7c:0a:15:56:5e:
         80:6c:70:8b:64:ad:97:60:7b:6a:ce:0d:56:9f:3e:44:86:f5:
         6d:bd:e8:0d:ad:e8:cc:0f:6e:30:a9:78:29:cb:8f:c2:19:ac:
         38:01:d7:fb:31:04:d7:a8:3c:ba:3f:bf:88:b0:68:b8:ea:1f:
         e1:10:a7:cd:10:49:50:d8:a9:04:e0:d4:d1:54:0b:a1:5e:cf:
         6e:3f:37:19:30:16:e1:65:3c:98:45:d9:c0:f0:71:30:7a:11:
         db:2e:03:78:18:a1:75:81:39:54:be:83:2d:a4:04:2a:a4:d7:
         0f:72:78:b2:1d:bc:9e:aa:46:7e:82:43:12:a5:02:0c:55:7d:
         68:26:79:29:f6:25:8b:65:0b:6f:5b:2b:a2:df:c0:b8:81:09:
         2e:85:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:29:58 2025 by rpki-client