Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa
File:                     b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa (raw, json)
Hash identifier:          t8orgzqGX+RrVUjeLpXIr2xc7xSCZqPY8rQDG0duKgg=
Subject key identifier:   75:F8:D2:E0:73:5F:8B:7B:F9:8F:0D:55:14:A2:F8:32:3B:E8:B9:72
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584B89175E0B8BE89878A2911490
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        216.83.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5e:0b:8b:e8:98:78:a2:91:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=90202c5d-d7fd-4cb2-865a-aad59ae2cd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:23:e3:a0:fd:a8:a4:52:0f:42:24:ef:f3:
                    5d:6e:7d:3a:92:33:2b:52:0e:a0:87:31:a2:9e:d6:
                    ba:00:66:0f:44:0d:6d:c1:b9:e7:eb:32:6d:7f:65:
                    83:ed:34:bf:1b:69:1c:6c:ee:4a:f4:86:a6:9f:a9:
                    57:bd:af:fa:0d:32:6d:2b:76:8a:b0:60:81:67:9f:
                    28:36:4b:15:f4:13:cf:a6:2d:8a:73:87:ce:73:b9:
                    a0:34:48:48:20:e5:8f:5d:bb:48:d3:ef:24:ef:67:
                    86:ea:47:df:d5:ca:a9:3d:a7:64:f1:64:35:2c:13:
                    d4:f9:fd:d0:c3:d6:7c:f3:92:95:31:5a:4a:40:36:
                    63:a0:55:ea:4d:0a:96:61:d7:a4:b8:2a:de:c5:ad:
                    c4:84:43:29:aa:69:42:6e:be:19:0a:62:d1:70:55:
                    dd:b8:0b:25:c7:73:b9:cb:d5:a1:9f:4e:6a:bd:4d:
                    9d:4c:bb:58:cc:db:1d:2b:f3:69:12:39:b2:df:77:
                    d3:a2:7a:c4:b9:1f:df:b1:0d:ee:d1:5e:21:45:46:
                    60:67:fe:b2:48:3f:72:16:99:50:7d:8d:c5:b8:2c:
                    01:a2:a0:a1:aa:83:d6:15:bd:c6:b8:5d:30:79:c7:
                    37:3b:b0:cc:2a:48:e6:69:c6:30:ba:07:1a:bf:ed:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:D2:E0:73:5F:8B:7B:F9:8F:0D:55:14:A2:F8:32:3B:E8:B9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b145b5a2-f186-3b8c-a9f2-9b76582dcea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:47:2f:44:fb:62:e1:b4:b3:6a:7d:c0:48:71:b7:bf:94:0c:
         de:5f:b8:1d:f4:63:c8:43:83:dd:d4:b6:aa:20:22:66:f7:7c:
         fd:dc:6e:3c:8f:8b:ac:8b:69:a5:ce:f1:88:78:87:8d:1d:61:
         77:a9:d2:94:93:0e:69:0f:4a:a4:f8:eb:61:ba:5a:f4:11:6a:
         7b:3f:21:c7:8b:09:56:53:f2:1b:63:a2:5a:bc:c8:6c:22:d4:
         1f:ab:24:34:f1:5b:dd:50:d2:63:46:13:37:6d:44:36:d6:c4:
         ab:5e:41:d0:1f:95:86:90:57:2e:1c:d8:66:fa:4e:e8:f4:96:
         6c:f6:ea:f2:49:c6:a1:4c:29:89:55:62:61:84:00:79:44:b2:
         49:20:1c:05:bf:3e:5a:3c:f1:1c:62:18:53:0d:73:c5:0e:0c:
         db:d9:bb:13:d2:e6:0e:6e:6d:d2:cf:29:71:c5:16:ec:d3:dd:
         c8:41:08:28:ef:48:02:10:9f:f6:44:02:cd:38:46:9d:07:82:
         db:7b:4f:b9:e7:b7:93:89:d9:75:25:75:07:6f:f5:8a:d0:0b:
         b8:59:79:b3:24:eb:45:f4:e7:9b:02:f3:43:49:2c:46:6b:dc:
         1d:06:39:cd:a3:d2:83:c5:6d:c1:61:88:df:7a:c1:42:b4:a5:
         f2:e7:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:13 2025 by rpki-client