Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa
File:                     8eceff37-9155-3a3b-bb67-f167aec0ee87.roa (raw, json)
Hash identifier:          x0ryOj4UIPTPDgmISBwBTlcVFGD07BEJSVdGFb9DVDw=
Subject key identifier:   10:B4:94:27:57:1A:67:66:DF:E3:14:74:B0:9B:56:AE:B7:FE:BD:B6
Certificate issuer:       /CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
Certificate serial:       010D0C9F4328584B2FC19A2A9EBBEBCC5E463D80
Authority key identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     16796
IP address blocks:        198.163.221.0/24 maxlen: 24
                          198.163.222.0/23 maxlen: 23
                          198.163.222.0/24 maxlen: 24
                          198.163.223.0/24 maxlen: 24
                          2620:35:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:9a:2a:9e:bb:eb:cc:5e:46:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=77e78440-935e-4152-9a34-1dd6e19a054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:70:4a:bc:3d:6f:c1:42:ec:2f:61:2d:c5:
                    65:5f:0e:da:31:fd:28:a1:82:88:cb:d1:89:65:68:
                    1a:41:2d:e2:75:a8:2d:f8:52:f9:ae:bf:04:f8:bc:
                    be:74:88:0b:0d:f1:7a:1b:c8:7e:8e:4d:bb:b9:64:
                    a9:f1:a7:5f:3f:2a:7b:8c:5b:fd:bf:20:c5:c5:a8:
                    13:2c:71:87:7d:e0:7b:65:a0:56:f1:dd:fc:82:60:
                    c8:a2:b6:d3:e5:f7:2f:4f:5b:fb:47:9a:36:9d:4d:
                    6c:1e:62:32:a4:f0:4e:25:3c:9e:8f:83:39:9a:fb:
                    29:25:15:f1:56:1a:9c:b4:1e:df:63:d8:10:b0:47:
                    27:05:12:dc:5d:20:b1:10:36:0b:27:71:68:38:02:
                    d2:f2:20:d4:57:39:12:49:33:b0:d3:8f:3b:0f:ce:
                    88:dd:c4:b1:18:85:4c:24:68:34:cf:a6:d5:80:68:
                    4f:b9:64:7f:13:ad:ba:88:4f:57:bc:03:9e:e4:d6:
                    8b:a0:7c:b8:65:84:74:4e:f1:14:21:cf:47:38:83:
                    4d:dd:08:a5:bd:20:f5:31:df:bb:24:90:95:33:b7:
                    a8:31:af:8e:ca:78:fe:3b:35:41:f5:b3:c7:54:23:
                    f8:c2:1b:27:8c:52:ad:65:eb:41:52:72:e2:90:24:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B4:94:27:57:1A:67:66:DF:E3:14:74:B0:9B:56:AE:B7:FE:BD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl

            X509v3 Authority Key Identifier:
                keyid:9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.221.0-198.163.223.255
                IPv6:
                  2620:35:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:17:23:a7:05:bb:66:10:08:53:f2:85:4c:c0:50:8b:17:ab:
         e1:96:ed:30:2c:cf:39:00:ac:f7:1a:00:d5:80:2b:12:9c:8f:
         0d:fa:f7:ae:29:e0:23:0f:c5:26:cf:39:fe:4c:5d:93:ae:08:
         97:97:7c:88:38:c2:82:58:7c:9c:af:62:ed:f5:15:7d:f4:88:
         a3:41:b7:28:2a:6c:64:65:aa:5e:41:50:75:c8:96:5f:82:1e:
         e1:e6:79:8f:ce:8d:68:a7:8a:9f:3d:dd:fd:dd:68:4b:a6:dd:
         b6:36:0b:4b:f6:71:77:35:4e:87:c8:c3:e8:cc:d4:1c:01:76:
         c5:67:6a:cb:53:6a:3e:05:7a:f2:5b:62:18:6e:ed:dc:cc:15:
         f2:96:f9:0b:40:76:a0:7f:13:bb:5a:25:ee:91:eb:a1:1f:7c:
         d7:07:f5:1f:34:e0:87:a2:17:ca:28:3d:07:4e:20:39:c7:32:
         96:1f:8b:ff:2e:84:d1:30:f5:88:fd:d7:47:4e:66:53:03:73:
         bd:e5:65:0f:c8:b7:98:93:f9:88:a7:d4:8b:bc:a3:72:72:5f:
         d6:ca:a2:cf:6b:38:e6:0e:14:95:0d:50:89:8b:9b:26:a8:15:
         44:09:6e:6b:74:10:00:31:f8:d0:63:3f:07:bf:6c:ab:d0:06:
         3d:bf:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:07:45 2025 by rpki-client