Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/f5abb985-e073-3c54-947c-56afeb13f50c.roa
File:                     f5abb985-e073-3c54-947c-56afeb13f50c.roa (raw, json)
Hash identifier:          zlG9VZ0BuOTpg3qcHe2bMmR4KMLzHroAaYNmSE1fBRQ=
Subject key identifier:   80:E1:A2:1C:E8:7F:43:6B:B8:DF:52:C8:18:AD:CE:4C:F1:4E:37:95
Certificate issuer:       /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
Certificate serial:       010D0C9F4328584B80B76C8DE95498D6BF43A800
Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/f5abb985-e073-3c54-947c-56afeb13f50c.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     834
IP address blocks:        185.216.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6c:8d:e9:54:98:d6:bf:43:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=b1b89c46-ba0f-4a9b-bfa2-38f52d1b64ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:6c:8f:30:0b:32:bf:b1:13:10:91:78:9a:
                    4a:77:57:eb:10:da:04:3d:b8:57:04:a3:8c:1d:d4:
                    cd:fa:a1:00:b0:ce:2e:58:43:3f:68:e2:41:ee:b5:
                    c7:4b:ec:65:b3:b1:46:ce:89:89:24:7e:e7:1c:33:
                    52:22:74:98:a2:8a:9f:a8:2b:aa:09:3a:b5:29:d6:
                    9c:fd:36:4c:68:27:b1:ce:82:5a:6b:1d:aa:b8:a8:
                    16:92:39:03:90:01:8e:aa:ef:45:0f:ab:01:dd:e0:
                    1b:79:09:9f:c8:b4:4d:7b:1d:f7:8e:bf:e7:f1:5f:
                    ab:5f:d0:4d:97:cf:23:f9:2b:47:e2:c9:d9:11:9a:
                    54:67:9f:84:de:24:c4:ee:3c:b6:98:61:11:05:e8:
                    43:7c:1f:0d:63:db:e4:2a:16:43:b2:2e:c7:f5:b0:
                    cd:49:5a:1c:a9:4b:af:78:a6:33:9a:2d:b0:3f:f6:
                    a8:85:65:91:58:c6:0e:66:8a:ce:9d:63:87:09:63:
                    59:e6:11:06:02:60:ba:fb:18:67:ba:2e:9f:86:9b:
                    db:5d:05:75:6a:e0:eb:90:8b:dc:25:1f:cc:ed:2a:
                    ec:a3:5c:6d:62:90:df:d2:06:30:97:bc:04:a2:4b:
                    c3:49:15:c1:10:77:de:9f:fa:d7:a5:12:c3:5d:7f:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E1:A2:1C:E8:7F:43:6B:B8:DF:52:C8:18:AD:CE:4C:F1:4E:37:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/f5abb985-e073-3c54-947c-56afeb13f50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:57:f0:af:d3:29:ee:b6:aa:57:c0:a2:6b:c3:2d:29:6f:1d:
         b7:63:92:8c:9e:59:46:b7:93:f4:c2:90:f6:c5:19:b7:eb:b4:
         83:3e:fe:b0:d4:35:fc:a1:e5:96:4a:d6:da:16:94:fa:17:b9:
         e2:f4:41:ac:f5:5f:4c:38:25:29:4d:8d:aa:a6:53:7b:28:63:
         80:89:cf:9e:d2:53:fc:62:0d:8d:3d:a8:07:4f:9b:55:b9:5e:
         0e:e9:3e:f7:f6:d0:2e:af:f5:0c:db:20:0a:2a:e8:69:fc:02:
         f4:b3:80:c3:a9:fa:dd:14:e7:56:bb:c4:80:ca:6b:e0:f6:84:
         0a:32:26:e8:10:5d:d2:04:ef:fa:cc:7c:f0:84:b0:5b:41:bd:
         e2:d1:c7:39:f4:23:8f:e6:88:ce:ec:c8:fe:0a:45:35:e5:a1:
         28:52:da:ea:fd:9d:f6:f4:df:82:10:49:2a:f5:89:c5:61:c0:
         0c:f7:e7:c5:19:3a:30:1b:66:f3:99:f4:37:34:30:d9:39:2f:
         ed:1c:a9:8e:01:35:eb:66:74:52:d7:5a:ac:ba:69:eb:f3:50:
         84:3c:a0:24:48:c7:c9:b6:92:25:1d:d0:02:a5:e0:32:67:b1:
         fc:ed:3b:e6:46:bb:56:2f:58:ae:01:77:90:d3:70:a2:cc:e5:
         f1:4e:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:46:12 2025 by rpki-client