Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa
File:                     31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa (raw, json)
Hash identifier:          zQPZPA3QjIngGVe7l3YRtlQE7DcQnAEQDXeF2rekdw4=
Subject key identifier:   F9:4F:0F:B4:15:ED:D7:17:E5:A3:12:04:87:D1:B9:5C:77:7D:4C:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967816EC322CB3C076F140
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     14112
IP address blocks:        216.18.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:78:16:ec:32:2c:b3:c0:76:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=bbb212d5-7b34-4db3-a009-2283cf75b088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:25:d6:bd:2a:22:79:23:8a:0f:b6:17:18:
                    9b:e4:f4:43:cf:7d:2a:aa:70:43:4c:bf:43:75:02:
                    15:96:a6:71:e5:a7:4e:db:ef:a6:b6:42:57:0f:9c:
                    bf:e7:83:b2:69:1d:78:c1:73:a2:66:65:ab:76:40:
                    d9:fb:62:8f:f9:95:8b:24:84:c8:75:f5:dd:b9:c9:
                    68:f7:dd:52:91:1d:53:1e:07:96:99:ac:ae:7f:2d:
                    03:97:c4:40:85:4b:7c:03:c2:30:80:84:b0:7a:cc:
                    3c:4b:70:d8:2a:54:14:47:6a:ba:42:5a:e5:38:1a:
                    e3:f5:7a:2c:ff:d0:96:37:c9:7a:70:f3:0a:e4:46:
                    bf:0d:82:06:77:03:98:e0:8a:3c:2a:b8:03:cc:ab:
                    50:19:f2:43:a6:d6:1c:44:82:48:97:4d:49:99:c5:
                    c0:08:97:7b:db:b8:63:ce:3d:56:2f:52:05:3c:71:
                    c7:29:20:ad:51:3f:e0:6e:39:43:02:eb:84:b3:95:
                    18:2c:c2:91:f8:a1:b9:17:2a:ec:a2:16:57:13:fe:
                    57:eb:fc:f4:97:9b:b3:98:d9:6f:61:4e:a2:0b:6f:
                    e3:5e:33:9d:12:fc:23:b9:6a:f2:fc:0a:f7:38:f8:
                    c7:d9:98:3a:6c:3d:3d:71:d3:75:d0:40:98:19:98:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4F:0F:B4:15:ED:D7:17:E5:A3:12:04:87:D1:B9:5C:77:7D:4C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:62:b8:fc:9a:b8:39:97:4d:ca:fb:94:c2:70:bf:0f:3c:
         aa:ea:23:6f:79:36:6c:da:1b:7c:b6:c3:93:44:22:88:7c:cb:
         99:a0:59:7c:1a:63:fb:01:c5:8b:6e:4f:60:b4:60:1f:ba:81:
         64:a6:f0:b2:a5:cd:9a:4f:81:a2:98:25:46:49:ac:25:8a:47:
         0c:d7:e7:e7:0f:de:00:41:86:aa:be:7e:cb:8c:3c:18:0b:32:
         30:11:f2:0a:cd:4a:b5:08:ae:b3:58:8c:b2:14:16:ec:34:f9:
         63:db:eb:c1:e0:79:c1:00:5c:73:3a:e0:60:32:f9:a7:44:95:
         81:56:2b:e6:8c:bd:03:95:fa:7a:ef:fc:47:63:27:b3:d8:97:
         59:80:8c:22:05:63:df:c4:49:81:8b:18:d9:ce:f0:96:fc:45:
         2f:ef:bb:70:ce:bb:2d:ef:f5:17:92:29:db:fa:1e:ac:a9:7f:
         b9:85:51:11:8a:29:a5:d7:b2:ef:aa:f0:1d:fb:a1:d4:b4:6f:
         41:c0:42:9d:0d:4f:d4:28:0c:fb:99:06:2c:24:98:a0:81:7e:
         75:86:43:95:37:31:a1:84:ce:f2:e7:c2:67:db:3a:48:5e:0f:
         15:76:ce:08:a3:02:96:0f:6b:8b:82:5b:b3:f3:b6:13:04:7d:
         96:98:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:51 2025 by rpki-client