Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa
File:                     fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa (raw, json)
Hash identifier:          LNvmWF98I7i2KCOMh9ETlCDOtidTG+feHU6xJAZ7O/Q=
Subject key identifier:   0B:B7:51:E6:96:DF:FB:98:9C:54:FE:BC:BD:69:14:00:0C:BC:21:AF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19678672456357605638F40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     30381
IP address blocks:        216.6.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:78:67:24:56:35:76:05:63:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=05c73e34-3407-4c70-a574-205537e9c39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:2f:cd:81:e1:d6:97:9b:ca:31:74:33:8b:
                    30:de:6f:cf:e2:1a:ef:9b:87:43:e8:d1:be:87:34:
                    eb:91:f1:8e:41:1e:bf:7e:66:53:20:58:fc:97:d6:
                    28:bc:75:44:c0:fc:07:0e:de:6d:fb:90:71:86:3e:
                    47:ef:c4:55:e0:0f:b8:2d:04:5f:54:bb:d3:d0:9c:
                    3b:6d:7e:2d:1f:64:fe:5c:bf:12:57:e1:59:f9:fc:
                    7a:4d:80:73:ea:ec:24:b2:ac:28:3e:e7:95:b6:19:
                    91:21:a7:fd:52:9b:9d:b9:1d:ed:57:ce:cd:81:76:
                    18:e8:ef:3d:33:a3:16:03:fb:bc:f0:77:34:bf:61:
                    b0:30:11:f7:08:02:f2:e6:46:6d:e1:86:39:01:42:
                    81:ae:17:85:6f:aa:40:73:ad:91:1f:a2:89:7e:61:
                    19:75:8d:3e:9d:15:86:30:41:c7:5b:bb:c2:b9:7b:
                    27:06:1d:e7:fc:e5:fb:cd:b5:50:24:7c:bb:35:4a:
                    21:56:3f:12:e1:6a:f6:a2:61:be:22:97:22:79:92:
                    67:8c:06:28:50:65:d4:e8:b9:e9:1c:11:3c:06:7c:
                    8e:1e:e7:9f:77:0f:ab:5c:d5:89:f9:f3:ba:22:13:
                    6f:18:6c:cc:f7:03:7f:af:27:69:6d:a6:fc:0c:a1:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:51:E6:96:DF:FB:98:9C:54:FE:BC:BD:69:14:00:0C:BC:21:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:12:f7:03:0f:b2:08:26:21:e0:62:d1:be:83:66:bc:f6:
         ee:26:ee:7f:26:af:41:c3:1c:3a:47:2b:4f:d0:c0:aa:3c:1b:
         6d:84:0b:8f:06:88:ac:47:c3:04:9b:d2:90:2d:1b:1b:37:e0:
         e9:2c:f2:3c:fd:fd:01:58:ee:92:b1:f8:08:d8:3d:4c:44:78:
         d4:02:20:84:16:9f:a7:6d:c7:63:2d:75:9b:88:6b:69:06:0a:
         c3:ec:d2:2e:2c:2f:2a:95:66:9a:5c:4d:9d:f7:5c:91:21:3e:
         8d:1e:7d:fd:12:02:31:5f:aa:70:27:87:ff:bb:3c:26:aa:45:
         fb:7d:4d:35:e3:72:12:ff:cb:14:0f:89:27:14:e7:9d:94:a0:
         95:94:13:dd:5a:c2:5c:cd:fb:1c:54:20:e6:2a:d9:0f:a3:a4:
         55:78:d6:cd:52:25:7b:b4:2f:57:c8:81:4d:82:08:e7:0c:c5:
         e9:f5:15:d2:2e:ab:f1:13:d7:14:ca:98:3d:22:67:d4:a5:9f:
         3e:67:4b:0f:a1:e4:6b:af:a0:de:32:16:a8:8f:5e:3a:f9:fc:
         b4:f4:97:a1:9a:78:1d:44:03:1d:f1:7b:e5:29:35:8b:58:89:
         95:3c:ad:ab:db:26:ad:cc:01:54:06:c7:79:fb:35:27:db:0d:
         47:3c:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:53 2025 by rpki-client