Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa
File:                     12016b71-96e5-3124-8f79-0266ee8ef00c.roa (raw, json)
Hash identifier:          mFh65xe6Mfx/B//0RtPaRwHOaH1FrIta0mUP+lSJt6k=
Subject key identifier:   42:15:16:91:41:C4:74:1E:07:32:4B:58:BF:7B:FE:48:8F:5E:00:91
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584B25FC31F3EE9E64C3C0FC5100
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     16437
IP address blocks:        192.160.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:31:f3:ee:9e:64:c3:c0:fc:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=637bafef-c629-4d55-b154-3b4da48c2377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:ef:9a:e4:0c:14:8c:01:aa:fd:f4:6a:c8:
                    8a:92:a9:fa:44:34:a7:3b:28:bd:27:4e:8d:53:5f:
                    3b:ca:a5:f2:ca:66:d0:e3:36:14:14:fb:69:e6:9c:
                    41:68:c5:33:9e:dd:66:54:fc:75:94:1a:21:03:6d:
                    9a:4e:20:97:4b:6e:ec:0b:c7:64:28:ea:2e:e7:86:
                    66:22:b0:ba:3c:72:90:76:78:03:cb:01:66:41:4b:
                    7b:43:0d:2a:89:47:da:64:57:1b:bf:50:e7:fd:ee:
                    b6:db:e2:a6:87:32:8e:9c:be:f3:0a:17:1f:56:1e:
                    be:1d:43:ff:73:04:f6:4a:4e:ee:f3:a8:77:b0:f0:
                    6f:20:bb:46:bc:7c:8b:86:ff:27:06:18:26:32:7e:
                    02:ad:55:ee:2c:9a:59:99:5d:b4:c8:11:6b:5f:26:
                    37:38:5f:8d:06:80:aa:33:3e:29:02:2f:ba:48:6f:
                    79:8c:ae:44:81:d4:dd:c3:b3:72:07:91:32:e0:53:
                    71:5e:56:8c:97:67:74:a8:80:50:f8:a1:0d:ea:8c:
                    f0:08:50:19:aa:95:1c:57:89:8d:1f:ac:ee:58:e5:
                    0f:d9:33:ad:93:ef:ac:49:6f:52:54:1f:10:8c:8c:
                    5e:2b:70:2d:c0:36:c0:ac:19:27:13:e3:c7:cc:42:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:16:91:41:C4:74:1E:07:32:4B:58:BF:7B:FE:48:8F:5E:00:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:3a:7d:d5:95:bf:2a:d5:d0:a4:53:66:c7:cb:9c:0b:ca:
         36:e0:37:ff:19:e4:57:1d:51:78:db:72:91:d7:4a:23:42:63:
         56:ce:7f:dd:24:e2:a6:28:96:45:fe:95:91:57:5c:8d:a5:9d:
         ba:6c:0c:c3:84:c4:d8:9b:15:31:32:de:68:f2:40:72:15:b6:
         0b:e5:8f:3a:36:3b:12:5a:02:f8:94:fc:47:73:da:d6:90:8e:
         37:58:0e:9b:11:78:72:42:52:92:e0:d8:37:f4:cc:f8:12:30:
         b9:32:57:62:24:e8:d7:5a:82:da:50:36:1a:ec:4c:64:09:55:
         c7:c8:f5:f2:61:35:b9:b7:d1:d9:46:00:39:0b:90:80:12:7d:
         df:f0:61:dc:5a:a2:05:92:b1:70:16:f1:4d:5b:de:3b:b4:45:
         73:98:e5:f9:2d:17:d3:62:91:02:8a:8d:1b:4b:a4:18:24:e2:
         11:9a:2f:1b:c9:2d:99:3e:95:58:fe:0b:be:ff:02:24:c2:60:
         33:34:88:18:60:ff:89:f9:a6:86:23:12:38:7c:3c:69:9e:d7:
         5b:ca:bd:85:71:0c:0e:71:11:1a:4e:d2:ae:2c:3f:fa:e0:f9:
         66:1b:83:bc:c3:55:68:70:44:4d:76:33:f7:03:0a:4e:87:11:
         32:ca:30:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:18 2025 by rpki-client