Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa
File:                     8896b689-171f-34b4-b9ae-56d03ec86257.roa (raw, json)
Hash identifier:          gO3XqBj3DYWnJGY3be2ROWOPdCNSJQmPQAQYRouL6qI=
Subject key identifier:   F7:3B:4F:1F:27:4B:7C:F6:FC:B2:30:32:37:B2:78:77:57:92:D7:F1
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AD3A9DC86104BAD2A1E980F00
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa
Signing time:             Tue 12 Aug 2025 01:18:34 +0000
ROA not before:           Tue 12 Aug 2025 01:18:34 +0000
ROA not after:            Mon 10 Nov 2025 02:18:34 +0000
asID:                     26229
IP address blocks:        162.138.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a9:dc:86:10:4b:ad:2a:1e:98:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 12 01:18:34 2025 GMT
            Not After : Nov 10 02:18:34 2025 GMT
        Subject: CN=4f31d978-539e-48bf-9a27-2a7ed095cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:e9:58:53:58:ef:db:be:29:76:25:28:89:
                    33:05:bb:70:2d:39:b1:65:74:72:09:fa:a1:e3:3c:
                    86:20:23:78:f8:46:bb:f1:ce:a6:2a:f9:84:8c:22:
                    48:93:ba:a1:b5:0f:c1:8a:51:84:0f:87:1c:0c:cd:
                    5f:94:b0:e9:c2:e2:0a:d8:ef:6a:1d:bb:dd:f9:1a:
                    ab:85:e1:50:26:57:48:7f:45:ad:ec:1c:c6:e2:12:
                    c9:a0:b5:43:52:df:29:be:f5:fa:b8:65:b4:1a:2f:
                    1b:9a:89:d6:45:a9:15:8f:c9:21:76:d6:df:a5:2a:
                    9c:b2:80:65:2c:cd:5b:6c:22:08:40:ea:af:b7:18:
                    ca:e9:41:71:18:9f:21:10:50:6d:d8:14:a8:06:d6:
                    da:36:02:5b:ab:71:04:7d:eb:79:c5:25:ad:7b:62:
                    45:15:1b:f8:f2:53:d4:26:46:2d:15:5c:e7:f5:04:
                    f1:c0:b6:9b:c9:d8:f8:a2:21:33:2f:d2:1e:d2:d5:
                    1c:01:66:a6:89:a9:93:30:58:f0:04:17:5a:cf:4b:
                    fb:63:9b:bf:fa:51:a6:5a:4d:aa:5f:ca:4a:88:47:
                    7b:15:70:62:3a:5b:10:f0:11:04:c6:38:88:51:66:
                    05:b4:4e:0f:c1:af:78:cb:86:0f:df:6d:3b:13:7b:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3B:4F:1F:27:4B:7C:F6:FC:B2:30:32:37:B2:78:77:57:92:D7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:80:a1:55:34:f0:1d:0d:0b:ab:b4:34:d9:4b:d3:d4:8b:
         77:47:dc:59:7f:b1:71:51:cf:93:83:40:e1:f5:51:6e:07:12:
         07:70:21:1f:be:9f:9a:72:39:ff:59:c5:a3:da:67:93:56:a9:
         78:bd:ad:ec:ca:45:2f:46:bf:ff:75:5d:1e:15:ec:2d:79:a4:
         8b:8f:21:60:2c:0f:f1:57:80:5d:89:49:02:6f:4b:0c:31:de:
         e3:54:36:68:02:88:6a:8a:7e:08:f8:c9:a5:17:a2:65:5e:1c:
         6f:5e:15:a1:f4:f4:16:64:bf:3e:79:31:a5:eb:0f:92:6d:ab:
         e1:14:f1:8a:cb:c4:4d:96:b5:20:d9:82:d3:c8:ad:0c:de:e3:
         3d:e7:9f:21:33:f3:51:6a:64:61:20:a3:0d:05:53:2b:0e:80:
         50:67:ba:a5:0b:bb:61:df:85:67:71:e9:27:dd:c4:59:aa:2a:
         56:98:d9:08:51:3b:02:21:7f:54:5b:57:07:2b:a8:2f:23:32:
         f2:32:06:6e:3c:36:8e:00:eb:33:70:73:4a:6f:ac:94:a6:49:
         83:13:09:68:9d:d3:7d:52:ed:f7:74:b0:e2:a4:3a:10:49:d0:
         71:63:d2:f1:2a:ec:e8:56:5d:fd:87:c6:e2:3b:0d:5f:0d:d5:
         4a:e8:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:57 2025 by rpki-client