Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa
File:                     0c109f68-e32d-303c-be34-d9916fbbcd5f.roa (raw, json)
Hash identifier:          SfAUDICCjdDRtq11jhUksVNjrHVtmUOCmRIGsqIWtx8=
Subject key identifier:   C6:16:F4:31:2A:90:A2:6A:6A:4D:91:79:F1:3E:1E:75:39:C9:1D:EF
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584AD3A12B46F569C2B71C716080
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     141001
IP address blocks:        216.38.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:2b:46:f5:69:c2:b7:1c:71:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=5769d104-1f53-4be8-982c-b9f708dff995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:b4:03:f9:a6:6d:be:81:c8:58:fe:7f:b5:
                    a7:99:13:3a:b1:e0:99:92:41:12:ba:5a:17:7c:53:
                    cb:28:ba:4e:dc:43:89:dc:45:18:85:4c:21:d0:32:
                    0f:e1:d0:a0:24:65:3f:11:2d:db:be:44:e5:c7:bd:
                    ce:45:8c:dd:c8:4d:39:75:bb:a5:ec:ba:ed:dc:54:
                    c8:97:26:2a:76:f7:58:f4:05:f9:0f:ff:24:91:fd:
                    b3:0c:38:e8:d4:b5:d4:12:a6:61:f3:bf:d4:fe:f0:
                    dc:a3:bf:fe:0f:e3:41:a4:b7:25:5c:3b:29:19:46:
                    41:c4:ca:e1:48:ef:0f:1c:58:0a:35:27:ab:6f:01:
                    9d:6b:20:d9:6f:c0:c6:f0:7c:a3:35:75:49:19:e0:
                    96:7e:a4:1a:0b:a4:fc:8c:b7:73:ae:c5:74:1e:b9:
                    26:2d:14:34:79:55:8b:47:2e:95:6c:34:77:d7:a7:
                    64:9b:ea:ee:5b:55:12:63:db:31:7a:db:ff:df:36:
                    81:25:0a:c4:86:0c:9e:f3:80:89:29:a6:e5:ce:66:
                    c5:48:ee:b2:38:30:da:9f:ef:79:c7:96:18:f2:61:
                    64:b9:7a:dd:36:b3:c1:77:42:f8:99:02:6c:38:a7:
                    03:01:d8:b7:b2:00:cd:a3:ad:04:14:f6:70:67:df:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:F4:31:2A:90:A2:6A:6A:4D:91:79:F1:3E:1E:75:39:C9:1D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:a9:84:94:b4:31:1e:2e:7e:7a:c2:f4:e5:42:f5:cc:52:
         49:bc:f6:7f:9d:7c:cb:e0:0d:58:46:55:cf:94:23:53:ca:79:
         a1:88:55:1c:90:26:fb:71:46:93:f9:c7:09:41:72:e7:fd:94:
         9b:20:b3:35:0c:59:5c:3d:c0:dd:2d:92:33:78:d7:86:91:76:
         fa:5c:cb:69:84:e7:00:a1:30:19:da:cb:7a:77:41:ff:89:de:
         9b:a1:af:17:3f:b2:4a:38:77:99:a2:ae:57:66:33:12:c5:c6:
         0d:f2:2b:26:01:fb:a0:e2:b4:68:07:b0:5a:d2:ae:9a:e6:6d:
         13:a2:3d:7a:33:cc:45:40:a4:0d:98:9e:3a:ea:cd:d7:e8:be:
         5d:a6:49:ed:fe:e6:8a:7b:18:e0:73:4c:98:ef:b3:b3:15:cc:
         b1:a8:27:80:1c:0e:75:ef:a9:af:01:82:9d:43:bb:ee:48:68:
         28:f5:13:70:41:3d:e9:c4:d2:4f:44:c7:47:ca:57:6b:84:16:
         74:21:69:5c:18:11:83:73:c5:f6:81:d0:54:eb:b8:ad:6d:59:
         23:54:6e:7a:49:8a:97:64:5e:54:2b:24:8f:a9:4a:91:06:54:
         14:2c:bc:c7:1e:a4:60:16:ea:0c:a8:93:66:fc:64:1c:c4:bc:
         13:21:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:25 2025 by rpki-client