Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa
File:                     e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa (raw, json)
Hash identifier:          pyD71uXprDnAMDa9tDWhzGiqD+Cs3MM9tJfKHTVqMBk=
Subject key identifier:   C6:0C:A4:0B:35:7F:60:68:F1:88:B5:6D:BF:41:2D:72:58:5A:DF:C4
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584AD29B253724B60ECD89730800
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa
Signing time:             Mon 11 Aug 2025 16:13:07 +0000
ROA not before:           Mon 11 Aug 2025 16:13:07 +0000
ROA not after:            Sun 09 Nov 2025 17:13:07 +0000
asID:                     14041
IP address blocks:        216.38.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:9b:25:37:24:b6:0e:cd:89:73:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Aug 11 16:13:07 2025 GMT
            Not After : Nov  9 17:13:07 2025 GMT
        Subject: CN=2dd2c078-c612-48eb-abd9-424925d1723e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:4b:4a:41:5a:d3:b3:59:b0:0d:a6:dc:53:
                    24:7d:8a:07:43:49:da:50:8b:fa:81:1b:ec:ea:83:
                    bb:57:4a:a3:03:ca:13:50:36:1a:56:2f:f0:77:12:
                    a4:a1:dc:39:ee:af:f9:a0:57:b3:94:f7:e6:b6:8a:
                    d5:68:0c:20:7f:c2:b0:75:19:29:6f:2b:8e:b4:02:
                    3a:48:2d:10:47:84:cd:9b:61:e6:08:28:d1:cf:8a:
                    19:d7:c4:4d:2a:71:25:40:07:ca:52:c9:e5:03:93:
                    98:85:6a:f7:bc:1b:3a:1b:ad:04:bb:a6:9a:51:30:
                    7f:c1:a1:04:a9:d3:ec:e1:11:c3:65:2a:cf:2f:d4:
                    77:83:39:0a:51:be:17:80:fb:dd:57:ad:0b:49:14:
                    84:52:4f:75:b9:5e:7b:15:79:8f:6b:17:0a:b6:36:
                    13:da:90:72:ff:65:cf:84:a1:21:1e:b4:6b:7d:e0:
                    ec:39:12:5a:ea:64:d7:36:7e:a4:eb:b3:6e:4d:8e:
                    2d:e6:8c:8e:3d:2c:68:79:ed:51:49:e8:a4:59:6c:
                    7c:0d:22:87:68:0e:e1:c5:72:48:c7:2e:fa:c3:14:
                    2b:50:6d:aa:8c:e3:a0:73:c8:3f:75:e4:12:d4:cd:
                    33:c7:29:47:13:dd:2a:fe:e2:f7:14:20:cf:dd:6f:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:A4:0B:35:7F:60:68:F1:88:B5:6D:BF:41:2D:72:58:5A:DF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/e4cd9f6a-da68-327b-989c-5eb9e7e19a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:09:85:55:51:da:07:af:df:35:b2:19:6d:14:8a:13:95:
         ff:7b:47:81:b6:91:9b:c2:16:90:7f:4e:3c:a0:0a:ce:08:7d:
         61:9a:a9:e5:a0:ea:79:c8:15:43:18:34:8f:4c:a1:c7:a4:18:
         c9:ce:df:c3:d2:68:95:95:75:11:24:df:54:13:4e:70:ee:f3:
         b2:60:b6:cc:78:8a:ea:d4:21:ac:86:f5:44:e5:85:a5:97:b7:
         57:22:a7:54:37:ed:a1:44:c0:45:9d:e5:5c:88:7d:09:29:eb:
         a5:00:c4:f1:11:23:f9:fe:b5:50:86:1e:8d:95:ed:75:30:ff:
         38:cc:43:b6:3f:a4:fe:06:d9:0e:dc:2d:d3:c1:5a:a4:1a:9d:
         ba:23:59:68:5a:17:aa:ae:1f:7b:e6:b2:47:cb:44:06:81:bc:
         56:3a:64:20:5b:83:85:ba:78:70:95:0d:58:00:c3:19:dd:ab:
         7e:eb:9c:f1:5e:5a:01:57:f7:e9:39:bc:c2:75:ff:ea:ef:cc:
         18:83:fd:e6:38:77:03:90:70:75:eb:dc:08:46:c2:fd:2a:a8:
         f5:6f:0b:8a:fa:5e:ff:ba:0c:e6:ca:58:82:19:77:84:2a:d9:
         52:93:5b:16:11:eb:b0:52:45:32:2b:07:3a:7c:ce:f0:c6:df:
         4f:a5:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:03:25 2025 by rpki-client