Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bb65e1b-7243-3e18-bf25-c5e8ee680a25.roa
File:                     9bb65e1b-7243-3e18-bf25-c5e8ee680a25.roa (raw, json)
Hash identifier:          W8KLiT856su8fsSIAt47/FiJC5UnNZbNzNrZeDHJOk0=
Subject key identifier:   EB:6C:B2:17:23:5E:00:23:BF:4C:24:18:E9:CD:86:92:27:D6:B5:A7
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F7C160920C598BE4CC80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bb65e1b-7243-3e18-bf25-c5e8ee680a25.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     11011
IP address blocks:        209.249.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f7:c1:60:92:0c:59:8b:e4:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=d0f7c1ed-77dd-4cdf-9797-ad20839a5d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:8d:e9:65:ef:8c:56:4c:43:8d:0a:25:17:
                    25:dc:32:26:24:56:26:42:ef:ad:b8:88:da:41:07:
                    7d:c2:f0:fc:ad:4e:bd:52:47:d2:29:91:e7:25:a6:
                    12:91:3c:68:c9:52:c6:71:cd:71:fb:d1:86:71:fe:
                    6c:65:fb:0e:2f:1a:87:4c:d3:a2:1f:c4:3d:4b:77:
                    9e:b2:c9:3e:00:23:9a:ef:ce:68:1b:75:18:43:ce:
                    09:f1:d5:2c:99:65:1a:fb:64:76:77:e1:07:aa:2f:
                    b3:57:05:3d:62:a5:39:e1:1e:99:b4:4a:40:da:f8:
                    d9:43:93:45:fa:d1:1e:d6:24:5a:01:82:22:ba:06:
                    78:fa:d1:39:d0:61:22:8e:b3:c4:de:22:40:11:1d:
                    e4:5c:7b:ed:fc:ed:61:b5:8f:9a:c1:95:04:94:5a:
                    f7:e3:c0:6e:00:85:55:96:62:d3:53:69:f5:22:07:
                    cd:64:fc:d1:7a:c9:37:1a:2f:91:5d:51:4c:e0:c7:
                    15:b6:ae:c9:3e:5e:ff:a4:15:2f:a8:12:08:85:71:
                    e2:7f:b0:1f:01:91:60:e6:8e:53:f6:76:fe:e5:18:
                    1c:99:b2:25:c0:4c:89:39:45:d0:37:0a:a3:30:d0:
                    03:0c:6a:75:b8:ee:42:9b:8a:88:c9:7a:1d:3b:ab:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:B2:17:23:5E:00:23:BF:4C:24:18:E9:CD:86:92:27:D6:B5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9bb65e1b-7243-3e18-bf25-c5e8ee680a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:22:6f:ee:35:9e:ae:c4:ea:d8:bb:d1:e7:7b:d0:df:7a:eb:
         4f:43:d2:8f:30:5c:25:2d:90:41:55:1c:fb:e1:30:ce:f1:30:
         86:a2:b8:d1:45:82:60:56:90:b1:e0:f3:1a:f1:8d:47:88:71:
         73:89:1e:a7:98:17:5e:ba:96:15:80:e8:b7:7b:37:92:c9:46:
         ff:49:37:f2:57:b9:2e:8e:6e:58:35:20:35:ae:40:11:9c:03:
         75:5a:b1:90:dd:22:67:6f:2c:57:96:32:f0:37:c5:c0:b6:fa:
         99:0e:fe:ae:c4:4c:38:3c:86:b8:43:f1:4e:cd:75:a5:9e:9e:
         21:06:8c:f4:44:d8:cb:71:ae:37:94:52:77:07:a8:4c:f7:bd:
         90:3c:0d:e9:48:ad:a0:df:9f:dc:ac:5d:76:64:ef:fe:39:d5:
         da:df:77:74:08:7b:33:b9:f3:ee:ce:c8:2a:2f:38:27:16:fe:
         c2:d3:fb:24:bc:9b:5d:e6:c0:ce:dc:c7:7d:2b:04:6d:02:9e:
         c8:7f:d3:2c:d5:d2:89:29:26:d7:65:8d:5a:35:30:7e:11:b6:
         5f:b2:8e:5e:98:1f:bb:f4:20:e4:3b:c5:57:1b:66:a4:be:18:
         c5:f2:44:fd:1f:f0:07:e5:82:b0:f6:04:34:89:49:8b:1c:d6:
         6b:79:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:12 2025 by rpki-client