Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37561ec0-348b-321c-810d-b157a97f463c.roa
File:                     37561ec0-348b-321c-810d-b157a97f463c.roa (raw, json)
Hash identifier:          Ki7lqVlaxA+JM74MmTTdDRl3uktrPfXpq3KInXcLjd4=
Subject key identifier:   15:0D:9A:34:6D:1B:B9:08:6A:BF:D3:DB:BD:E3:FA:8F:BB:B2:9A:D8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19676898CAB3AF45FFBF480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37561ec0-348b-321c-810d-b157a97f463c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        216.209.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:76:89:8c:ab:3a:f4:5f:fb:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9a8382d3-e8fc-4a38-8b4b-c1e32678478a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:94:b1:c1:21:f8:41:8d:0e:b0:b7:f0:44:
                    42:f0:87:20:7f:f8:66:9d:14:11:78:bd:a4:16:c2:
                    fb:0c:8a:c5:11:7e:ea:1f:41:0f:58:b7:02:10:f2:
                    c2:75:53:92:d0:61:75:a6:3a:d0:cf:69:25:ee:3e:
                    0f:da:95:26:41:9d:21:b7:f2:56:f2:3a:1f:dc:96:
                    a1:d4:67:f0:31:9e:96:17:c4:50:4b:76:34:c4:2e:
                    5c:7a:d5:90:ef:b8:a7:6e:df:d5:08:3c:0e:34:35:
                    d4:f4:13:a7:41:06:77:9d:00:1f:f7:8f:da:66:64:
                    26:fa:b0:6b:bb:b8:fe:09:63:34:ae:dd:c5:3b:58:
                    35:81:db:f8:5d:2e:61:b2:b4:92:c7:2d:d9:91:49:
                    3b:6d:5b:31:87:4b:41:7b:a9:a2:b0:50:5f:67:d3:
                    a0:52:90:59:4a:c2:0a:db:fb:ad:48:88:ea:eb:b1:
                    f6:68:55:f0:21:5a:cc:81:e6:35:80:60:34:d3:41:
                    61:45:61:da:fd:b1:54:4c:e1:18:ee:76:bd:d2:fc:
                    44:20:f4:18:5c:3c:b9:71:ad:f5:a4:db:33:e0:7d:
                    ea:d8:b0:04:13:1f:39:ac:b9:fa:e4:f9:05:02:bd:
                    8b:0a:32:8d:e0:14:ec:a7:1d:63:22:1c:0f:9a:fd:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:9A:34:6D:1B:B9:08:6A:BF:D3:DB:BD:E3:FA:8F:BB:B2:9A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37561ec0-348b-321c-810d-b157a97f463c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:7e:f4:5e:68:d7:5f:c5:d8:bf:9f:d7:b2:46:6e:d6:66:
         ba:6b:01:95:82:ee:62:46:07:e0:1b:0d:82:3d:14:c5:e0:18:
         51:52:9f:3d:0f:50:9f:48:33:86:76:14:80:79:1a:1b:2e:13:
         8f:2d:e7:5f:3d:a6:85:70:23:fe:44:f3:d4:8e:b2:95:e5:9a:
         00:de:66:62:81:f4:94:2d:ab:16:f0:55:c4:40:70:6f:06:dc:
         30:46:7d:36:2a:79:54:3e:a1:d9:b8:5e:a6:f3:f0:ad:13:6e:
         7e:cc:ee:41:70:34:ec:81:ae:95:d2:5f:15:f5:fb:a6:41:79:
         90:dc:dc:4c:78:90:dc:41:31:6b:93:b1:92:51:4d:08:ea:50:
         6c:b3:3f:b7:42:16:2e:6e:2f:b3:6b:e4:8e:fd:36:6e:3b:f6:
         3f:05:cc:21:87:4c:1c:f0:91:9d:59:08:fa:ad:3f:2b:47:17:
         91:84:30:f2:b0:f6:ce:71:83:fb:f4:5b:d5:06:78:c4:cc:25:
         24:91:0b:0a:dd:15:3b:39:95:29:fb:95:2d:9d:31:f1:ec:5f:
         ab:ba:da:be:d0:00:22:16:b5:32:4d:02:71:a9:0a:c8:0e:7b:
         22:2c:64:e5:d7:29:a1:37:05:95:e8:ee:88:32:73:f6:85:13:
         5d:45:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:26 2025 by rpki-client