Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa
File:                     c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa (raw, json)
Hash identifier:          OtPU6uR0ZoUwzsUs6b9wDP57TsVsxkbOajCd/I2vs5s=
Subject key identifier:   C0:1A:4B:C6:84:7C:DA:10:61:8C:7A:C2:29:04:09:5A:57:31:89:54
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AD3AA4AD5C2E57C9090821380
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa
Signing time:             Tue 12 Aug 2025 01:19:27 +0000
ROA not before:           Tue 12 Aug 2025 01:19:27 +0000
ROA not after:            Mon 10 Nov 2025 02:19:27 +0000
asID:                     26229
IP address blocks:        162.138.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:aa:4a:d5:c2:e5:7c:90:90:82:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 12 01:19:27 2025 GMT
            Not After : Nov 10 02:19:27 2025 GMT
        Subject: CN=dfc8b6dd-4616-43dc-b16e-636d71cbd7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:3a:bc:fd:84:5c:2e:48:1e:de:b7:d9:db:
                    3a:19:aa:8f:0b:54:73:b2:90:64:8a:e9:71:30:9b:
                    e9:f1:1c:99:26:45:4e:3f:01:ae:3f:0c:1e:22:7d:
                    81:1a:42:1c:16:0b:81:e2:cd:f0:46:95:59:f4:66:
                    2d:c5:92:aa:3c:33:dd:d8:ee:e3:73:35:d0:d3:e1:
                    3b:42:89:49:9f:bd:9a:cf:b5:81:e3:dc:b6:af:41:
                    cd:29:2b:c7:36:60:d0:f7:ca:6b:7c:bf:3a:71:35:
                    7a:f0:1c:e0:6e:da:87:bf:fe:6a:8e:41:54:0c:37:
                    cf:9e:e5:68:c4:cd:c7:af:9d:d0:d1:98:3c:ea:12:
                    c7:92:29:7f:f1:a0:f3:0b:b3:fa:df:0c:47:9e:7a:
                    44:4b:a2:25:d6:31:50:e9:3b:22:eb:80:a9:bf:ae:
                    d0:d8:f3:cb:9d:d5:e9:a9:ea:78:51:75:87:05:34:
                    11:a8:4f:66:36:5e:0f:42:da:1e:5e:ec:5a:15:23:
                    95:55:b1:a4:58:8c:ef:23:23:72:e7:57:b2:8a:a6:
                    aa:a4:42:00:b0:1d:67:f9:af:e0:2b:8a:39:bb:d1:
                    de:9b:9b:f5:92:d7:53:ea:c1:c5:90:e1:32:f8:71:
                    aa:f1:2f:18:71:93:88:e5:bb:74:94:55:8b:f3:53:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1A:4B:C6:84:7C:DA:10:61:8C:7A:C2:29:04:09:5A:57:31:89:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:14:52:17:af:f7:52:76:75:bb:a5:fe:11:69:64:4a:43:
         f4:41:a5:3e:f5:89:97:c7:8f:6b:0d:38:3f:22:4a:07:55:67:
         4d:5d:f5:18:14:a1:71:72:f5:4e:4f:f5:3b:2a:d6:3e:38:c3:
         d5:93:6b:64:a0:b9:3a:6b:24:3c:14:b5:c8:5e:8c:d4:24:f7:
         40:00:4c:6a:50:aa:4a:a9:3c:08:e5:e2:23:1a:a9:dc:69:29:
         86:f4:19:04:9c:83:87:10:d8:eb:b0:fe:41:95:26:3e:0e:e5:
         dc:0a:f2:38:2c:1c:80:5b:83:a4:34:99:3a:ea:b2:f7:ba:0d:
         cc:db:41:75:40:88:d4:03:46:5b:b0:1b:1a:43:cc:37:5f:9f:
         61:59:21:b3:cd:99:3a:55:7e:1d:9b:21:f9:d8:ea:fc:6d:4d:
         bb:2a:40:52:28:0a:b4:87:b7:b1:25:6b:b2:e4:12:13:80:bf:
         6f:a2:18:d2:14:c0:e9:72:b6:e7:be:15:29:9b:41:60:ac:53:
         c7:ee:d3:de:26:c6:3d:6e:16:29:e9:16:40:6c:61:ca:71:4f:
         45:17:83:b3:97:e7:11:3b:65:c1:4c:3a:30:7a:9f:b9:6a:de:
         94:3a:6c:b9:62:cd:56:b6:ea:7d:b8:3b:8e:f3:41:13:f5:64:
         7d:9d:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:00:34 2025 by rpki-client