Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa
File:                     7a31bc12-cb71-362e-aa28-7682e085fb44.roa (raw, json)
Hash identifier:          uoXBokgKJJqhbTmlaNPFddccy66DSetqf7mVqUZj/DI=
Subject key identifier:   73:D0:26:91:30:09:C3:19:82:16:F6:CA:9A:F6:F8:A7:5E:D3:AF:B0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197161F673A24A90E6E7A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        216.209.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:16:1f:67:3a:24:a9:0e:6e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c070816e-bcf6-4639-a678-a19fd56ff327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:44:34:a5:5a:57:b2:07:a2:ba:55:b6:93:
                    cd:bb:f5:eb:66:15:6c:a9:a2:e1:ca:6c:84:26:e2:
                    f5:0d:53:25:31:ab:8b:a9:b7:65:3a:f5:a9:5f:52:
                    06:4f:04:39:6e:b1:41:65:d8:d9:0e:b5:dd:f5:45:
                    3a:a4:b1:50:b9:3b:29:36:33:68:9c:cf:1a:c8:23:
                    bc:e1:d6:7f:5a:7b:60:c4:34:f4:d3:74:35:20:10:
                    e0:77:27:96:02:90:eb:5d:d6:34:d5:b8:24:5b:7b:
                    04:04:f7:5f:de:2e:96:a8:25:51:f0:73:d6:9a:a0:
                    4a:0e:e7:47:f0:29:d6:a8:1f:df:97:c1:25:b3:08:
                    02:1c:20:5d:af:8f:1e:e9:1a:f9:da:99:02:8e:0b:
                    47:09:fd:9f:42:e7:a0:05:1a:11:03:e5:8b:9b:60:
                    f7:7d:40:60:d6:f3:59:8e:7d:a0:4f:4d:7c:0e:0e:
                    44:8f:10:99:49:e0:8e:61:a9:bd:7a:cf:b1:23:6f:
                    7b:ae:45:8b:fe:53:fd:1c:88:e4:b1:03:46:3d:99:
                    df:27:15:5e:a9:41:cb:8e:85:60:6d:1f:52:0c:e9:
                    66:e4:a0:9f:fb:06:e6:81:6b:4a:92:5d:3c:a9:44:
                    ab:c7:1f:7d:68:dd:54:8e:01:91:38:c1:75:99:cb:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:26:91:30:09:C3:19:82:16:F6:CA:9A:F6:F8:A7:5E:D3:AF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:83:8c:91:02:d5:a1:6c:b0:41:6f:86:eb:91:f6:0a:fc:a1:
         f2:71:62:b4:43:18:1a:d9:7d:6a:6f:ad:43:99:7e:a8:c3:1c:
         59:d5:41:15:74:97:f1:cb:a6:48:67:d2:e1:8a:1c:14:c3:60:
         fc:85:09:28:c8:31:28:d4:e8:db:f3:55:b9:43:7b:2e:4b:0f:
         0f:e1:41:b3:01:f6:ba:61:3d:24:4f:a2:78:c0:66:5a:10:f2:
         ea:78:e6:52:bc:cb:30:45:d2:3a:45:45:65:4a:ad:9c:73:6a:
         d4:c4:c7:d8:b1:7d:78:68:5d:8f:1c:50:36:b8:3c:28:ee:29:
         68:cd:b4:29:32:a9:fc:b9:f7:9a:07:da:b6:7b:35:eb:fe:f0:
         ec:f0:ea:3a:b5:06:bd:34:73:4c:a1:49:a7:2a:0b:40:f3:0c:
         ff:a6:e1:a4:83:58:5c:58:54:7c:8d:a8:d5:c6:e0:41:c3:0a:
         d5:dd:3d:a1:9d:2f:c0:ee:21:24:70:94:a3:0e:b3:57:86:ef:
         43:5b:59:5d:fc:96:97:2f:47:fd:44:30:9d:74:89:ba:ad:9b:
         7d:fc:ef:d7:ef:13:e9:68:9e:bc:3d:63:6a:99:1b:27:92:49:
         15:4e:b5:a9:00:4a:04:32:4e:30:36:78:a0:c8:76:68:e5:c7:
         96:4d:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:56 2025 by rpki-client