Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
File:                     f22a97e2-6b52-3092-9e30-da9958902a1f.roa (raw, json)
Hash identifier:          7rdWtdHBcibCZJ62dSQTb22XD6WpNChNT5UEBMuUTBs=
Subject key identifier:   90:9F:05:72:85:A6:5A:81:34:64:7C:9D:C6:86:B8:88:37:95:9D:DE
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584AF7EBD2C4BB952C12CE92BD40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     13576
IP address blocks:        216.249.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d2:c4:bb:95:2c:12:ce:92:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=f72a60d1-b1db-416a-8f77-080ae3033e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:62:0e:4a:71:2c:8c:15:7e:4f:01:95:d5:
                    68:c8:c5:a5:b4:87:d4:54:23:4c:a0:b8:13:bc:09:
                    ea:bc:82:48:d0:7e:95:44:53:68:c5:1f:06:6c:03:
                    8c:17:a1:c0:b3:d5:92:93:11:13:3d:9c:2a:71:1d:
                    d4:32:e0:f7:94:80:54:7f:34:cd:c9:98:43:bd:f8:
                    d5:67:4d:72:d7:28:fd:11:14:24:52:d2:03:fe:c7:
                    8d:e2:4e:80:45:9d:9f:c0:d4:fc:4e:81:b6:d2:7e:
                    1a:ea:45:c6:1e:06:da:23:d5:fe:e5:16:41:75:06:
                    dc:4c:7a:52:7a:16:56:b0:a1:76:19:49:92:76:e7:
                    76:ab:d8:17:1d:61:65:e2:8f:df:3a:71:f2:7a:62:
                    7d:1a:b3:18:0a:d4:09:ad:b2:0b:44:0a:e0:cd:5c:
                    27:3e:64:9c:13:43:63:70:4d:9f:47:ba:ff:96:0f:
                    5a:f3:9d:76:03:40:12:81:5e:24:36:17:07:76:cd:
                    6c:f6:b0:6d:d2:ee:2c:9f:6e:9e:46:b0:a0:bd:72:
                    9f:59:5f:68:e6:40:55:a5:72:b4:bd:42:37:00:97:
                    33:53:57:af:2a:00:42:10:a0:5c:aa:ed:9c:b7:ac:
                    28:e9:47:e2:1c:51:69:96:57:df:3a:1f:8e:81:e9:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9F:05:72:85:A6:5A:81:34:64:7C:9D:C6:86:B8:88:37:95:9D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:26:aa:9b:48:bd:96:62:9a:f8:1e:e3:e6:72:4a:25:a1:8d:
         d3:73:7f:a4:91:ac:0e:10:49:07:18:c8:27:16:1d:4d:bc:75:
         e1:8a:44:a0:3b:66:6d:0b:7c:59:e4:37:27:50:c9:09:0c:77:
         58:7f:43:f5:04:4f:b9:85:07:6b:52:0b:70:29:50:39:b6:a3:
         9c:3d:8f:fb:6c:f3:8b:aa:04:e5:15:a4:0b:59:97:f2:e9:f6:
         a1:6b:41:fc:36:ef:4e:fa:14:5f:d1:c4:07:31:91:72:44:f5:
         6f:be:63:0f:19:7e:32:7c:fa:13:af:5e:61:5a:b4:9b:41:34:
         16:5c:29:8a:46:5b:81:06:ce:07:7b:9b:33:a0:45:27:a5:3e:
         db:dd:9f:b9:a7:83:ec:d3:b4:1d:86:8d:c1:ab:d0:c7:86:03:
         6c:7e:ab:3a:3b:8a:9a:99:2f:9d:eb:1c:0d:12:a8:f0:32:a7:
         1b:f4:77:97:3c:ea:14:ca:16:85:de:98:cc:a8:8f:44:1e:9f:
         e4:0c:81:fd:95:87:a4:3b:e9:cd:59:7c:31:39:58:3f:13:d7:
         f6:44:6d:a3:ab:ae:79:b3:56:5d:2a:f0:66:04:ba:1a:e3:da:
         21:c5:93:8f:e7:3c:a0:d2:ec:bc:a5:8d:6b:09:dd:de:60:1f:
         af:e5:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 05:33:46 2025 by rpki-client