Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa
File:                     95e0420a-8e55-38eb-81fd-185d3ca6d827.roa (raw, json)
Hash identifier:          VyjUOdAf/r6VMQdEkl36XRllepyaueIrnjZmwE/Ledc=
Subject key identifier:   9C:AF:4C:A6:E6:7B:FA:57:B8:74:54:39:38:3F:7A:23:84:B9:33:78
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584AF0F136660D809DC84551B580
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7311
IP address blocks:        216.126.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:36:66:0d:80:9d:c8:45:51:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=6dc0eed8-4a34-48fd-9e3b-37a45bac10fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:44:bc:f6:bb:aa:84:3e:d6:fd:a3:64:d1:
                    31:75:d2:e9:e1:7f:6a:18:b3:13:e5:33:66:f7:72:
                    09:9b:d6:84:bd:46:39:11:05:93:17:db:3a:56:16:
                    ba:45:70:38:4e:75:69:9d:5a:71:78:6c:0b:f4:a3:
                    90:80:67:e2:de:94:fe:b7:36:4a:49:a7:4b:3b:1f:
                    6d:9e:a5:b1:0b:23:81:9b:ea:41:32:9f:b1:a1:0a:
                    33:4e:5f:65:72:f8:e5:0e:9a:e9:a4:18:b0:39:ff:
                    c1:b3:81:bf:ff:15:19:be:72:4d:ff:44:6a:26:a9:
                    4a:f5:97:fe:b5:c3:10:11:c2:74:ca:ee:81:25:80:
                    36:50:40:58:5f:d2:33:3a:3c:a6:5e:c0:b3:94:bd:
                    be:df:c1:61:3e:55:9b:67:6e:07:7e:d3:af:a8:6b:
                    81:cc:e5:33:28:b6:e8:9f:52:b6:c5:d0:9c:7d:4d:
                    98:2e:25:04:c7:c7:b7:26:5c:e5:ac:d8:34:1c:ac:
                    85:8b:69:50:fd:9a:41:fe:1a:df:c5:20:a8:81:bf:
                    ca:05:05:f8:04:52:a2:a3:52:37:d7:00:2c:53:d8:
                    c3:1b:af:db:9b:40:3d:be:e3:2c:15:4c:e1:3a:9a:
                    e2:8c:01:86:e5:19:23:97:c0:31:cd:1f:ff:a9:30:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:4C:A6:E6:7B:FA:57:B8:74:54:39:38:3F:7A:23:84:B9:33:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/95e0420a-8e55-38eb-81fd-185d3ca6d827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b4:8c:96:5b:bc:d8:63:b7:b2:a0:a5:a8:3e:04:45:14:ea:
         31:cb:21:38:59:54:13:bc:48:cd:66:c0:d9:66:88:2e:1f:b7:
         9c:df:79:f4:fe:5e:d7:c8:08:69:20:ee:9e:02:05:66:46:83:
         ca:52:40:fc:33:8b:74:8d:68:fd:81:a7:ff:4a:9f:ed:9c:03:
         ee:7e:c3:1b:37:10:60:a3:71:d8:c8:0b:95:9e:2e:e3:6c:26:
         a5:b6:88:b8:73:2b:ec:55:69:6c:c8:d6:a0:95:95:74:c4:0e:
         14:bf:86:a1:3e:e8:61:0f:6f:53:4f:4f:d6:77:76:ef:b1:f7:
         ac:1f:cf:5f:c2:0d:e6:d0:0e:a4:73:e8:e5:57:8d:6c:fe:45:
         41:cb:4f:75:ad:a8:c5:56:ce:25:72:f6:2d:cf:78:e2:2c:93:
         bf:60:c0:b1:ef:25:f3:e0:1a:ca:0c:3e:b2:6a:cd:53:38:98:
         9f:8d:2a:32:ad:63:b0:32:b5:5a:b3:eb:8e:4f:1f:4e:9a:28:
         32:2d:42:b9:b3:cf:f8:a6:cf:64:b5:21:00:87:8b:9b:a6:ec:
         7d:e5:07:88:ba:ed:85:6e:90:d9:4f:08:e8:d6:ed:44:c3:5a:
         ba:54:37:4e:a0:ab:a2:8c:9a:89:db:e9:fe:85:36:63:24:64:
         9a:0f:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:06:25 2025 by rpki-client