Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
File:                     2212b82e-48ef-39d3-bc69-7f64c6197522.roa (raw, json)
Hash identifier:          uIGS7ulezCoHk8eWyYQpJ4b6vmH/lUpiWddY+iKMYLE=
Subject key identifier:   FD:96:62:99:BF:3B:86:1F:F5:03:B3:F1:11:2F:7A:08:C9:C9:66:BA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B233189306065FC80C8D68780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     202
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:89:30:60:65:fc:80:c8:d6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=205d6575-2e20-4ba0-9541-3d15c970d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:d3:3a:76:95:ea:5a:9f:25:fd:d8:10:98:
                    76:51:d8:9f:10:5e:21:e3:84:47:98:1b:6f:29:cd:
                    8c:21:25:2b:f5:53:c2:ff:70:9a:48:36:e0:19:25:
                    02:28:a2:db:db:4a:4a:2c:ec:69:8d:8e:e1:a5:fa:
                    e3:26:83:6c:d2:97:28:ac:4f:77:0d:74:37:94:49:
                    b2:88:bf:b8:1f:b9:4c:a3:c4:30:ad:53:d6:0c:13:
                    9e:ad:91:b1:04:ba:63:c8:c0:7b:56:90:94:62:97:
                    4a:5f:db:05:4d:7f:49:7d:3b:61:a1:d2:1f:13:08:
                    d6:b2:e1:9a:da:4f:ca:ef:be:17:d4:19:29:d7:e7:
                    0f:aa:7b:5d:22:59:ab:0c:47:dc:0a:1e:af:3f:e6:
                    79:d4:90:ef:f2:6c:ad:c1:aa:fc:f1:0b:fb:69:42:
                    ad:52:97:b0:e6:c7:7e:cf:da:11:b9:62:3c:95:ac:
                    e2:b1:c2:f4:3c:d2:63:c6:63:eb:2f:32:03:1b:a9:
                    61:28:d2:61:32:09:a3:1d:78:55:42:38:10:11:1b:
                    06:f7:37:55:3e:cf:ed:46:b5:ae:01:af:44:74:16:
                    47:7f:9f:7d:bb:3a:d3:47:00:87:cb:ea:8c:70:8b:
                    62:ed:81:af:94:fc:fe:ad:69:45:3b:52:50:79:04:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:96:62:99:BF:3B:86:1F:F5:03:B3:F1:11:2F:7A:08:C9:C9:66:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:66:f9:b7:84:ee:63:b8:03:8e:c5:f4:0d:01:9e:e1:9c:
         26:a6:7c:cd:f9:d6:ff:10:0e:e1:c2:7e:1e:d1:ac:cf:30:cc:
         d3:66:f6:98:5a:25:66:3a:c5:bf:e2:b4:2d:30:89:42:32:fb:
         91:78:f2:3b:49:a1:a1:4a:53:ea:c0:e0:48:d2:b9:d0:f5:02:
         2b:13:d7:f2:f3:a7:64:c1:f9:0b:16:05:07:6b:b0:29:22:c9:
         f1:06:b6:75:0e:85:52:cc:3e:8c:02:86:1a:ff:e5:f3:bf:e3:
         97:78:89:6b:d1:88:06:27:a7:90:61:66:ed:1f:51:df:0a:c5:
         1f:19:17:2d:32:50:72:f6:0c:60:74:34:97:f2:ea:51:43:99:
         18:1b:6f:71:de:fe:27:96:c6:c2:50:e3:9d:53:dd:bf:cc:48:
         f6:92:1f:09:94:97:94:55:10:ce:e7:b8:dc:f8:21:b1:01:b0:
         b5:42:d7:0c:76:59:c6:27:cd:65:81:1f:eb:1f:80:95:f3:3f:
         97:f9:41:54:2e:50:fc:f2:dc:23:ca:06:fe:1e:d1:2b:4b:7a:
         ea:fe:26:e7:0b:27:78:4a:e5:8a:4b:33:58:02:d0:50:4a:32:
         d9:12:c1:e5:11:d8:55:47:2b:10:95:2c:74:df:af:85:99:1d:
         94:a0:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:30 2025 by rpki-client