Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
File:                     6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa (raw, json)
Hash identifier:          LalPXuunCusJNyDGu2V1AAGYvIzcn9w37vQ7zGixOxE=
Subject key identifier:   84:A2:28:4A:60:99:CD:C1:23:FE:92:C9:73:3E:9C:74:86:F3:E4:25
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F4328584B2A2C373F3A392BD5A8FC2700
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     137409
IP address blocks:        216.189.34.0/24 maxlen: 24
                          216.189.58.0/24 maxlen: 24
                          216.189.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:37:3f:3a:39:2b:d5:a8:fc:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=63a5e94b-6626-431b-87da-635c8f126a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:27:a3:f5:28:9c:70:6d:58:b3:15:fc:ca:
                    07:43:21:d4:6e:f0:21:1e:de:7b:8a:86:3c:f9:fb:
                    42:2d:f0:30:bb:0b:d0:b8:8f:71:59:5c:93:fd:71:
                    2e:e0:31:56:4a:c8:96:9d:ce:dd:86:1c:55:48:14:
                    f4:82:ee:92:19:c2:7c:69:7a:ce:4d:f2:53:a8:93:
                    a7:9c:6d:2d:4f:d4:2d:e4:15:bf:4b:d7:dd:33:cf:
                    97:70:03:c3:ff:82:df:50:1a:ac:91:0d:28:43:d2:
                    62:17:7e:6e:2e:1b:44:bb:e1:bf:85:c6:12:2d:e0:
                    87:a8:73:ff:e3:92:72:b3:6a:ef:4c:51:7d:06:00:
                    ae:1f:0b:ce:f8:95:ef:fc:60:57:6a:8d:ee:3c:2b:
                    b9:c6:d2:c7:d7:04:eb:73:94:92:5f:af:50:ae:c3:
                    8a:42:a0:a1:75:c8:87:ed:36:d9:07:70:c0:1e:86:
                    63:1d:c1:f9:11:e7:bf:93:5e:66:6b:aa:97:c6:56:
                    55:a6:de:10:0e:40:a1:f6:f2:9e:f0:71:0e:b4:0b:
                    f1:9e:2c:10:bd:4d:8c:47:1f:72:14:e1:d0:87:97:
                    d1:2b:e8:ec:dc:28:45:18:76:8b:c2:f0:96:67:4e:
                    1c:11:1c:2e:31:27:8b:de:9e:f0:55:04:a0:98:34:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:28:4A:60:99:CD:C1:23:FE:92:C9:73:3E:9C:74:86:F3:E4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.189.34.0/24
                  216.189.58.0/24
                  216.189.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:f1:3d:3e:7f:2c:77:4e:01:87:e6:f5:c0:82:46:95:7a:
         6a:06:20:03:a8:d6:75:08:ef:c2:7b:ee:be:df:6d:89:43:77:
         a0:28:6c:77:d8:6e:a3:9e:44:27:a4:e6:bf:6a:cb:ae:d7:c7:
         ee:50:4e:b5:86:90:42:1a:f1:22:80:4d:9c:2e:c4:fb:6d:06:
         63:ac:2b:c1:4b:ab:25:f1:85:45:60:28:94:19:00:c2:1b:ea:
         c8:d8:01:f0:b9:c4:97:39:9d:c4:d7:45:de:07:20:15:f1:77:
         6c:c0:94:ea:80:19:6d:bc:32:27:26:36:97:56:68:2c:b8:af:
         24:c0:b9:08:1e:b4:42:cb:29:1d:b6:44:e3:90:e8:6d:63:47:
         1c:a5:a1:ba:fc:1e:7d:e4:19:c1:cd:03:a2:82:79:e9:a2:58:
         b9:25:87:2a:d8:50:ad:56:75:07:4f:7e:01:04:54:fc:b0:bf:
         5d:71:66:73:14:42:ee:16:bc:82:90:00:63:4e:31:45:a5:f5:
         a6:fd:a6:e9:16:14:51:96:5c:bf:59:96:6d:c2:7b:8e:37:3f:
         aa:4a:e2:2f:b4:27:03:05:6a:3d:e6:ed:64:60:10:cf:30:cd:
         71:df:c5:f4:fd:d7:0a:2c:42:d6:71:95:88:74:43:2f:f4:23:
         f9:dc:6c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:04 2025 by rpki-client