Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa
File:                     eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa (raw, json)
Hash identifier:          kDPrpaZFINqscH3VBvGVzwAjL/BbEqR5PvvUn/dzdn0=
Subject key identifier:   A7:3C:C1:72:FE:53:ED:F8:FF:9C:0A:E6:E0:EC:00:8C:E1:CB:07:44
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584B1D9C2B07189CA5C14121C540
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     398427
IP address blocks:        216.83.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:07:18:9c:a5:c1:41:21:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=208bc969-19a8-40d1-9948-c5f89c1297ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:6d:0e:a8:cd:68:32:1c:7c:14:ec:ce:c2:
                    a9:6d:a8:9d:5b:0b:ea:4f:4c:2d:dd:bb:ee:59:72:
                    cb:ae:58:09:0f:fe:77:fc:57:3e:90:b0:c2:91:72:
                    c0:ea:b8:c0:fa:e1:9c:ae:61:cd:2a:06:44:ce:9b:
                    cf:8b:9d:fd:c0:d9:1b:67:80:9d:75:f7:22:22:23:
                    3a:48:d9:02:25:16:fc:0a:a0:9f:93:ac:31:30:8c:
                    9f:bb:b1:6c:7d:cd:3a:9f:93:4f:74:3b:5f:48:86:
                    e5:0d:35:ea:c4:47:e7:01:9b:72:8d:1a:29:4d:78:
                    cd:f2:5d:bb:85:33:dc:95:11:a7:1b:a4:bf:bd:1c:
                    75:a5:1f:dc:fa:2b:f2:a4:fe:34:e2:ef:f8:14:4d:
                    0d:52:97:f7:66:2a:2a:95:5a:aa:64:d3:f7:42:d9:
                    25:0d:a6:a6:6d:ed:9d:b2:89:55:9d:12:02:4d:2e:
                    cc:34:52:2b:7d:71:07:3b:14:21:0e:78:5c:26:6a:
                    ba:05:c8:36:9a:45:a7:d3:5b:be:d0:83:10:9a:33:
                    14:c2:83:e0:bd:98:3a:d5:e4:f7:62:56:cf:8c:62:
                    75:f8:43:0e:28:97:fe:f6:9a:d9:a1:6d:5d:fa:37:
                    2a:0a:4c:9c:8c:b9:e1:9e:2d:15:1e:57:96:ec:33:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:C1:72:FE:53:ED:F8:FF:9C:0A:E6:E0:EC:00:8C:E1:CB:07:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:14:96:a0:f9:1d:35:0d:67:98:31:13:6c:b2:c2:2b:ef:
         b0:1f:0f:ef:00:90:e4:ec:7f:0d:56:8d:b3:02:33:f1:d0:bb:
         ca:b4:64:56:03:c8:60:e5:d2:ee:fc:de:38:88:6e:4f:24:f1:
         5e:d9:7a:e0:3f:8b:75:4f:fa:59:e5:d7:c5:20:73:39:f5:e4:
         f8:e0:08:04:c0:74:aa:03:6d:c9:6b:31:71:d7:dd:91:2d:8c:
         6f:ed:59:27:af:97:66:8d:d3:ef:06:d8:b8:43:16:fd:be:1b:
         36:27:e1:34:cd:39:5d:a1:f6:64:94:0a:2d:1d:0a:42:14:6e:
         a0:ed:11:db:f1:4c:d1:67:0e:91:bd:30:64:67:dc:60:35:7b:
         4a:f7:40:d8:6b:66:b1:a0:4e:30:7f:2e:53:45:ef:9e:d9:70:
         39:5a:a5:29:3b:16:3a:cd:4e:6e:a3:c6:d5:b7:55:bd:0d:95:
         fa:c8:57:90:d2:f9:1a:9c:76:d0:57:f8:57:85:db:73:da:d8:
         c8:7c:e7:f0:45:69:a1:07:bc:23:b3:07:7d:c4:8f:fb:71:22:
         52:d9:36:24:e3:95:a4:e5:eb:26:f4:6f:2c:d6:fe:1e:6b:b5:
         3a:f3:2f:68:f9:82:21:4a:87:7a:05:2f:38:2d:62:b2:a8:e2:
         4e:81:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:59:02 2025 by rpki-client