Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa
File:                     fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa (raw, json)
Hash identifier:          GFi0l5bSSGFX7xVkeJCAsMLDHFg9mGkTZayZurC6Vq4=
Subject key identifier:   3B:27:A2:E1:C2:7E:FE:0B:88:E4:9E:47:6F:59:12:55:39:9D:A0:90
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584AC9DB9EBAE404779071190880
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        168.245.216.0/21 maxlen: 24
                          208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9e:ba:e4:04:77:90:71:19:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=bbf14b71-5c14-4473-b2c0-e337cac8fa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:d1:a6:c5:bb:9f:19:3d:be:b1:fa:60:ec:
                    97:41:d9:30:90:7b:ac:c6:a1:ae:ea:ce:31:f5:70:
                    ff:7b:8b:a3:0c:1c:2f:2e:75:17:ed:df:68:7f:f7:
                    f9:42:fc:e6:19:9a:e1:05:5f:9c:fb:bb:f7:cb:2f:
                    bc:bd:01:d5:ab:9e:cd:38:d1:9f:95:80:2e:31:33:
                    27:30:91:79:f8:a5:7a:a2:d9:48:e2:20:c1:2e:d9:
                    bd:b1:60:ab:bc:31:85:52:6a:53:1b:0e:4a:a2:af:
                    a5:6e:e5:b9:8c:f8:ff:d0:6a:aa:66:5a:77:bc:8d:
                    be:73:64:a7:4a:f6:81:69:34:f6:0c:7a:9d:ec:77:
                    a8:22:ae:fa:63:5b:50:6b:fa:c8:d6:a2:a7:c0:0c:
                    6c:f1:d6:53:4c:0a:d8:e9:de:59:5f:46:99:83:ef:
                    ea:46:f1:76:bd:a0:e1:e0:5b:95:02:02:6c:2d:38:
                    76:b4:10:cb:ed:e6:e5:e3:f6:8d:b3:df:d5:95:98:
                    a4:cc:84:37:eb:a8:6a:45:9a:5e:4f:f7:44:d8:9b:
                    ac:d6:23:56:4e:8f:bf:17:5b:81:fe:b4:d8:4b:6b:
                    93:ea:75:51:9e:98:d7:72:9c:5d:e3:3b:85:cf:d3:
                    4f:cb:a1:e3:39:6d:a6:31:e0:62:0c:bc:4c:96:a8:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:27:A2:E1:C2:7E:FE:0B:88:E4:9E:47:6F:59:12:55:39:9D:A0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2c:66:02:81:fc:9d:53:87:50:be:a4:74:6b:7d:ee:f5:e8:
         d7:7f:ca:fe:2b:b0:43:b6:e4:2b:d8:13:80:18:91:aa:1f:d3:
         eb:66:91:9e:4d:f4:ff:20:73:0a:d2:c1:db:96:62:48:f4:5a:
         7b:83:1d:35:95:d3:5c:32:e8:e0:4d:af:7a:7d:8e:ac:29:e3:
         cb:f5:76:27:e9:ce:fa:29:a7:d8:0b:04:ca:8a:c9:6d:d0:59:
         a7:27:88:bc:cc:f4:86:63:9f:41:00:70:63:56:51:41:f0:61:
         cd:0f:eb:65:50:2b:f0:67:38:7e:3f:db:66:37:1f:9c:77:a3:
         3d:79:e6:e7:54:1b:9c:69:d1:56:2e:bf:f3:83:ab:4c:bb:95:
         91:96:0a:9b:43:e0:3b:2a:cf:e1:5e:30:93:7e:d1:38:f4:af:
         de:2c:d1:2f:dc:76:4d:71:2b:61:17:f0:ad:4a:0b:ee:03:ec:
         f3:ae:12:0a:e7:45:9f:3b:9d:b8:3b:b7:ee:94:c4:cc:66:16:
         66:83:18:e6:f3:c7:b3:81:61:ba:69:18:79:28:4a:57:bc:2b:
         34:3a:50:2c:0f:5b:68:c9:cb:76:99:6b:4c:19:6b:5e:43:ce:
         05:c2:ea:e8:2f:da:d8:4a:ad:7d:98:bf:d1:55:44:2d:4a:b8:
         4e:a8:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:08 2025 by rpki-client