Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2578ec83-6978-34d5-8d60-14d92aeac17c.roa
File:                     2578ec83-6978-34d5-8d60-14d92aeac17c.roa (raw, json)
Hash identifier:          6uuiTIiXJHePGplnZmTYrVNp6sgg0wj9HcCwCbBVzeY=
Subject key identifier:   E0:CB:97:A1:AF:F6:E1:93:75:9A:68:38:DA:90:9B:97:DA:20:C0:6D
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584B3C51B4ED60D3FB16280E9D80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2578ec83-6978-34d5-8d60-14d92aeac17c.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        208.83.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b4:ed:60:d3:fb:16:28:0e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=8be645b6-a129-4d87-a3ab-12eef6b3aea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:ae:79:da:f3:4f:d3:49:55:c3:31:a4:dd:
                    28:63:08:40:e1:5e:9b:96:da:62:0c:d6:32:7e:2b:
                    44:33:2e:34:c6:25:0c:f9:1f:f4:1b:c0:34:a8:18:
                    d3:9a:cb:20:80:5e:c2:a9:9f:dd:d3:36:96:26:b0:
                    ba:40:32:20:17:db:20:b9:43:6c:d5:be:13:bf:16:
                    86:43:2e:ed:9c:88:d5:21:fa:0d:67:1f:a1:58:53:
                    eb:31:03:91:fa:bd:fb:91:99:ba:7b:75:75:ec:d0:
                    3f:a7:48:b3:1f:e9:1c:23:93:d7:af:b5:31:5c:11:
                    a7:f6:4d:ba:75:34:58:c1:ab:ba:6f:fa:56:aa:21:
                    61:57:58:52:45:fa:6a:d8:37:da:8c:bc:27:39:23:
                    0e:74:81:ae:2e:ca:ec:ba:4e:ce:55:a6:40:f9:b5:
                    31:e6:0f:32:ca:83:c8:44:c9:72:54:cd:45:c4:ab:
                    85:2e:c1:ea:97:a3:35:e9:dd:f3:4e:1b:d9:5b:7b:
                    02:24:f4:3b:73:23:41:38:10:79:f3:08:6d:17:47:
                    e0:8c:09:a9:d2:9e:c0:56:66:6e:ca:53:b6:e7:70:
                    69:36:89:f1:95:f9:cf:22:9d:12:b0:9e:c5:0b:e2:
                    df:0e:a9:98:71:22:15:fb:b3:07:4f:06:a0:9d:3d:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CB:97:A1:AF:F6:E1:93:75:9A:68:38:DA:90:9B:97:DA:20:C0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/2578ec83-6978-34d5-8d60-14d92aeac17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:19:5e:b4:c0:71:6c:75:ea:e8:51:a5:de:f6:f9:14:48:66:
         05:2e:8e:53:d9:89:eb:04:cb:43:a3:8b:73:38:6a:0c:3d:e9:
         23:02:ae:9a:5b:3f:2f:f9:85:17:f5:9c:5a:40:9b:0c:7f:e8:
         df:bf:5a:fa:fb:05:9c:2b:84:37:aa:9e:39:4a:47:0e:b5:6a:
         72:84:a0:95:f0:b3:45:d7:4b:65:49:01:da:e5:3d:8a:6a:6d:
         ad:39:19:8a:f2:ae:c9:33:8b:ba:ed:c3:37:64:f3:bd:0f:8e:
         ec:42:46:99:bb:ab:5e:16:61:97:08:fd:02:5a:41:aa:10:f8:
         a3:f2:8c:3d:27:cf:18:5b:ed:59:30:ca:f7:c0:ef:34:04:0a:
         af:5d:08:ad:1a:ad:4f:f7:35:44:59:49:43:e6:93:d1:b1:e7:
         82:07:63:ce:b9:36:1f:21:b9:f8:db:3c:67:44:bf:47:d3:67:
         8a:6e:4c:cc:94:83:4a:89:b8:6f:7b:ab:5d:74:cc:bb:01:ab:
         46:8a:fe:1b:2d:40:01:e1:c1:ab:3b:54:b8:e6:5d:98:ed:7f:
         21:63:6b:97:99:a4:80:aa:84:d3:0b:99:a7:7f:b8:6a:2b:a3:
         f0:b1:c2:70:2d:ab:a5:67:80:aa:15:18:f9:07:a2:65:ce:1e:
         71:d9:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:31 2025 by rpki-client