Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa
File:                     73be8573-d1ea-397e-a168-f5f7d625c273.roa (raw, json)
Hash identifier:          58f1+76YE9pNfjggpdE547HBvnX3JjWIkiCjGAPgBdc=
Subject key identifier:   91:A3:9A:ED:FA:D8:9A:2F:AF:CD:FB:C8:21:05:DE:02:76:DA:F9:DB
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AE8913128BC1CEE8376B12080
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     395382
IP address blocks:        162.248.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:31:28:bc:1c:ee:83:76:b1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=6b18b54a-8eed-4f54-9f98-d6ebacf93e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:11:4e:9b:49:ec:1e:3a:10:5d:74:9d:5e:
                    e6:19:14:70:d0:d2:f4:b1:5d:14:3f:09:c3:6b:45:
                    c6:f4:2d:29:d3:11:fd:64:5b:70:0d:cd:2a:01:f7:
                    2a:a1:4b:19:31:55:09:f1:f0:93:c5:54:d6:d7:09:
                    ea:a6:06:57:b1:fd:bc:c7:2b:ab:e9:cb:3a:5b:24:
                    49:2e:d2:6c:e6:b7:31:3f:25:e3:8a:7c:2c:cb:68:
                    e8:f8:af:a1:93:89:03:33:ec:59:d3:fd:f8:50:89:
                    07:85:c4:86:97:4c:a5:d8:74:ef:13:82:c0:4d:85:
                    04:90:dc:1e:4a:26:57:4f:0e:bd:0a:e9:72:ce:f0:
                    a8:08:9e:86:75:08:22:7a:f5:ed:06:bc:0d:8a:7b:
                    c3:48:61:71:b3:3b:bf:d1:7b:06:a5:6f:22:8d:4f:
                    ba:f8:99:70:1a:ac:69:fc:03:56:05:41:41:cc:20:
                    48:3a:0d:53:c9:fd:c4:36:d7:67:d4:0d:a4:21:3f:
                    ea:39:66:6f:1e:57:42:41:46:33:cd:55:8e:7f:6b:
                    3d:9a:30:86:c1:d1:1e:fa:eb:c4:d8:3a:7f:bc:45:
                    49:fc:8d:3a:44:45:06:d9:04:92:af:56:b2:1f:23:
                    52:65:60:a5:74:69:bb:e6:2b:73:48:5c:82:a0:36:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A3:9A:ED:FA:D8:9A:2F:AF:CD:FB:C8:21:05:DE:02:76:DA:F9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/73be8573-d1ea-397e-a168-f5f7d625c273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:24:70:d2:ab:d8:59:fa:ac:34:9a:da:80:b6:1c:3e:c2:11:
         40:e7:ff:3d:4c:69:1a:af:f1:7b:df:ae:bf:f7:de:a7:6b:ff:
         de:5f:7c:1c:a6:ba:2f:97:78:b4:c6:70:ab:98:f0:92:ca:e2:
         09:96:18:8e:7b:ac:3a:e9:78:6c:0a:b6:70:c1:ef:5a:24:c1:
         bb:93:cf:d3:0a:d1:f2:c1:81:bf:8f:d6:ee:11:41:0f:23:74:
         bd:30:d6:39:dd:b3:60:97:0d:00:c0:19:67:ba:79:a8:1c:0b:
         51:98:93:d2:4f:f9:83:12:f7:da:8c:6f:54:98:0a:2d:82:27:
         f2:7a:26:28:a0:de:5b:73:11:e4:5b:dc:8f:22:2a:4e:a8:70:
         e7:30:4b:e1:f3:9d:b4:44:63:c7:f1:3c:38:54:ad:12:86:fb:
         bd:33:5b:95:9a:a0:2d:38:03:c2:e5:ec:32:76:96:bc:7a:92:
         9a:59:10:9f:da:3a:a3:48:0d:b3:2d:e6:5a:5d:5a:8f:bd:42:
         63:61:72:f6:68:42:34:80:75:f7:0c:58:52:af:b6:73:08:95:
         18:76:f4:b4:e8:d3:2f:1e:14:4f:c8:67:34:c2:ae:d4:f9:c5:
         ff:aa:f0:a8:56:cc:6a:52:ee:53:cb:28:f2:f6:b7:df:34:48:
         16:84:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:35:50 2025 by rpki-client