Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa
File:                     c5544001-80a2-3d37-a385-da4ad0a51bab.roa (raw, json)
Hash identifier:          LxBiMhLLSVnWTIQNY7MlbrRAP3r5i1IPeBfvBADTWfQ=
Subject key identifier:   74:5F:E0:E7:E6:3A:51:9F:F2:2E:2A:97:A4:E1:33:16:18:BD:63:FD
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B3556E983596532342C54C880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     16417
IP address blocks:        216.71.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e9:83:59:65:32:34:2c:54:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=ece11201-da0e-4d82-b41e-5b6c36ab3207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:c9:9a:92:fe:3c:b7:6a:f4:ae:c0:0d:ff:
                    88:34:f3:c8:67:6b:51:a0:36:29:90:3a:82:16:2f:
                    20:43:d1:12:83:0b:4b:76:5e:c4:c4:bf:6d:f0:14:
                    6f:58:4c:1f:49:e6:dd:8f:e8:4e:af:07:41:a3:a4:
                    b4:2f:17:2d:a0:da:4e:39:d8:7e:2a:14:fe:64:ca:
                    93:e6:a3:0c:55:0c:51:ad:56:d3:38:ac:e7:a7:c6:
                    3d:e0:7f:44:96:a1:70:80:f3:f3:e9:12:f2:9b:91:
                    af:1b:46:be:ab:ff:dd:88:91:9c:7b:3b:c4:07:df:
                    2f:c5:fb:ed:37:f5:55:73:ce:68:e2:a7:2f:43:5f:
                    da:2c:2f:89:11:b0:a7:bf:9d:ac:a4:10:59:02:e0:
                    fd:03:76:b3:0e:57:e9:bb:c3:b4:d2:13:61:e1:7f:
                    09:4d:96:6f:c9:90:14:ce:e3:51:1f:3b:b5:2c:0b:
                    03:5c:79:c3:69:0c:0f:57:c6:3b:19:00:4f:4d:3b:
                    1b:80:0c:66:cf:f3:12:03:6f:a5:e8:cf:ae:40:67:
                    54:6f:56:5e:d6:da:fb:69:f2:66:7a:da:36:9f:13:
                    74:ca:bc:cc:d1:de:01:71:ee:1a:52:aa:89:20:ea:
                    c0:ef:40:da:54:fd:bb:89:90:08:fb:e1:85:84:95:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:E0:E7:E6:3A:51:9F:F2:2E:2A:97:A4:E1:33:16:18:BD:63:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c5544001-80a2-3d37-a385-da4ad0a51bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:50:36:47:8f:b3:6f:b1:4f:75:c2:e9:35:88:1e:e7:1e:
         38:6b:cb:bf:4f:b0:aa:8a:0f:12:85:59:1b:68:2c:3f:af:8e:
         05:21:22:8d:0c:27:1e:8e:66:6a:6d:7f:c1:78:2b:0f:1c:0f:
         1a:7c:1a:c3:5e:cf:46:fc:ef:4a:79:19:b3:6c:15:9d:90:f2:
         a6:11:9c:87:b3:31:f7:44:81:db:de:78:ae:e5:cc:63:e0:cc:
         00:f3:63:eb:ff:cd:5e:76:62:70:83:1b:49:b4:87:d3:67:fd:
         3d:e9:db:3f:d9:fe:69:3c:38:0b:5e:25:5f:26:c4:37:a5:1f:
         a6:0c:f9:fa:23:8d:e0:68:27:e7:ef:c9:df:f5:cf:b2:7e:2f:
         63:f0:fa:5a:ea:7c:8a:49:fb:62:be:8a:03:8e:65:34:96:fb:
         17:a4:b3:5b:ac:73:2a:45:1f:e8:e0:44:a9:70:6d:3e:55:d9:
         29:44:48:9a:1b:e4:e3:8b:3b:a3:f3:5e:5c:1e:42:a0:33:66:
         b1:d1:c4:5c:dd:a1:ab:58:ae:13:57:de:aa:8d:ad:64:58:17:
         14:f2:7e:12:89:f6:7c:78:a1:3b:fd:7d:27:da:aa:80:69:88:
         6c:6e:fa:d1:43:bd:8f:07:84:55:12:46:53:14:93:f8:af:f3:
         33:97:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:30:10 2025 by rpki-client