Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
File:                     804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa (raw, json)
Hash identifier:          PpwKulcD8u8vWnyOwg4Ff2CFtwN7CFrkuhsEDq4jXkc=
Subject key identifier:   B5:63:C9:58:57:D7:C8:AF:69:58:28:ED:13:B3:9F:1E:28:A7:6B:C8
Certificate issuer:       /CN=34468021-d790-42b8-b3cd-5d1592500820
Certificate serial:       010D0C9F4328584AF5214C8C76B3FC78DB7A6C40
Authority key identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399912
IP address blocks:        216.73.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:4c:8c:76:b3:fc:78:db:7a:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34468021-d790-42b8-b3cd-5d1592500820
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=c66ecb62-c563-43d1-85aa-a8c5da6a9f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:7a:38:cd:01:b8:66:a7:79:c2:1e:9a:e7:
                    52:8c:08:5c:8f:5d:f5:09:d0:64:4a:30:5f:cb:ff:
                    a6:b0:f5:f5:1c:a6:f4:c1:66:bf:0a:63:eb:67:cc:
                    7f:96:ae:bd:96:f7:14:60:60:de:e9:f9:d7:73:b6:
                    7c:65:43:b6:17:71:e1:dc:64:b7:2b:6e:01:83:31:
                    f7:8f:26:b8:c4:6b:e0:26:40:24:a6:fa:c3:0a:e0:
                    10:95:94:4c:1d:5c:ea:2a:8e:49:3c:57:cd:2e:66:
                    ea:d2:e0:f2:c0:58:9b:a9:8c:17:84:7a:6c:5d:cc:
                    7a:39:80:8f:c3:e0:b4:f6:e2:f1:81:53:de:ce:b3:
                    2f:ac:cb:a7:f9:9f:08:57:b6:13:91:02:d9:95:d0:
                    71:c0:7d:7a:d4:23:b7:0f:48:3e:18:ee:39:ab:eb:
                    af:8f:03:1f:1f:0f:ba:09:71:05:3d:a9:61:2d:b4:
                    d6:5e:07:14:8b:20:63:e8:ae:ce:20:3d:09:64:c8:
                    9d:29:f4:c3:d8:04:a4:81:3a:f8:bc:89:44:21:a6:
                    d6:74:21:b7:cd:9b:de:63:86:1d:49:c0:91:dc:fa:
                    a4:68:e0:52:0e:68:81:44:d7:44:4a:54:1c:d5:3a:
                    7e:d4:da:71:78:19:43:31:23:11:52:13:06:7f:f3:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:63:C9:58:57:D7:C8:AF:69:58:28:ED:13:B3:9F:1E:28:A7:6B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl

            X509v3 Authority Key Identifier:
                keyid:19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:1c:3f:42:51:1d:51:af:e3:91:3b:da:51:e3:ce:16:b0:
         01:92:bd:63:27:d3:5f:8b:08:70:87:b3:bb:99:e5:2b:31:d6:
         e2:20:2f:e4:a1:73:42:63:39:ec:3a:20:33:09:57:29:c2:dc:
         e5:dd:ed:5e:18:ce:16:2f:44:44:a7:51:bc:8d:2a:03:39:79:
         7c:bf:02:90:fe:87:cb:2f:28:d3:14:63:ba:07:f8:7c:ee:33:
         a6:1d:69:6f:36:b2:de:15:96:b7:fc:f5:d1:64:d2:31:fa:24:
         9b:9a:08:1b:62:b1:cc:4d:e5:da:30:07:50:5c:88:3a:9f:9c:
         d9:78:1e:73:96:9a:04:a7:5d:d0:ef:d3:eb:1a:a2:4f:05:a8:
         0f:37:b6:b9:a5:cc:bd:15:d6:c5:03:e7:d6:24:21:7a:55:1f:
         45:c4:c3:fd:5b:ec:58:7a:03:00:97:0e:cf:f1:fc:08:36:c7:
         3d:77:09:81:24:09:1f:e4:2a:95:6a:6c:d0:fb:6d:86:72:f9:
         a5:39:01:a2:a2:8c:79:94:3d:e9:71:30:e5:38:fe:da:69:8b:
         af:e6:d8:1f:77:46:8e:76:16:0c:92:b9:c5:90:5a:99:8c:f0:
         e0:b5:88:53:95:44:91:a5:e3:ed:00:84:b3:2a:47:14:5f:2d:
         5b:da:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:54:15 2025 by rpki-client