Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ea2ebec2-0430-3da6-a32a-ca7102365d17.roa
File:                     ea2ebec2-0430-3da6-a32a-ca7102365d17.roa (raw, json)
Hash identifier:          nVB0CtHAhuKmOmJE8s9mArN26DHuO6yvPBzFrlr3bb8=
Subject key identifier:   12:80:1D:71:5B:1D:AC:DA:F2:D8:DC:D4:7C:EF:57:13:07:F8:F9:18
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AD3AB182A9001DC74E7AA4840
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ea2ebec2-0430-3da6-a32a-ca7102365d17.roa
Signing time:             Tue 12 Aug 2025 01:21:03 +0000
ROA not before:           Tue 12 Aug 2025 01:21:03 +0000
ROA not after:            Mon 10 Nov 2025 02:21:03 +0000
asID:                     26229
IP address blocks:        162.138.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:ab:18:2a:90:01:dc:74:e7:aa:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 12 01:21:03 2025 GMT
            Not After : Nov 10 02:21:03 2025 GMT
        Subject: CN=3c75f319-4f9d-40c2-92e6-32288b70e9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:ae:a1:ea:61:47:06:79:b4:0f:dd:6e:f5:
                    e2:bc:d9:0f:33:96:c1:ed:ec:e5:5a:2f:39:ec:7f:
                    c0:31:9d:81:73:ac:2e:de:fc:dc:d6:e2:d6:51:dc:
                    e5:03:89:91:6e:dc:87:d7:ac:88:1a:da:d3:05:dd:
                    d5:30:5b:54:78:cf:a4:86:bd:5e:9f:8f:e8:24:51:
                    77:92:44:32:7e:f3:3a:b4:92:8a:59:c9:b0:f1:f1:
                    d9:5f:ce:a1:20:0f:68:e5:6e:f5:7c:da:82:67:d3:
                    c5:c1:58:8c:fb:33:d0:f6:1d:55:ce:63:b4:da:30:
                    ad:e5:99:cb:59:01:9d:2d:75:6b:ca:23:37:59:36:
                    6e:03:12:a8:a4:93:09:0b:b4:d7:50:b2:be:1f:a4:
                    77:0b:a9:f1:d3:ba:1f:36:7b:8c:23:e0:fa:21:db:
                    4b:cb:cd:3d:91:c4:50:a7:69:5b:f3:95:4a:32:eb:
                    51:d5:0f:64:05:6c:6d:c3:aa:00:3b:83:16:0e:b3:
                    c1:81:46:95:ba:72:14:43:1c:1d:dc:b9:99:8e:09:
                    4b:8a:45:6e:51:65:83:92:e7:d6:e8:03:86:6b:2e:
                    4d:5c:37:ad:48:aa:77:9a:b0:48:e5:de:cc:cf:97:
                    de:49:0e:1c:cf:da:b2:33:6c:73:59:3c:b4:bc:61:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:1D:71:5B:1D:AC:DA:F2:D8:DC:D4:7C:EF:57:13:07:F8:F9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ea2ebec2-0430-3da6-a32a-ca7102365d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:d1:aa:ef:dc:6c:4a:93:24:c2:5e:fa:cb:45:34:d2:da:
         2d:8d:d7:cc:bb:76:2e:43:fb:7b:3d:0f:c9:7f:cd:50:7f:ab:
         a3:43:00:99:6d:b0:45:a7:11:98:87:8c:70:9e:ab:cd:ff:53:
         9e:b7:23:e7:86:0c:23:48:ff:52:37:40:e8:b7:54:2c:59:5e:
         e2:f6:04:cf:4a:84:e2:62:6c:83:1f:fe:fe:e6:d7:1b:6c:90:
         47:6a:15:c9:0a:d6:b7:eb:c4:91:04:b3:1e:de:ed:7a:5f:bd:
         88:d1:78:70:0e:1b:0e:2a:37:f8:ac:1b:70:70:3a:3d:19:c2:
         c8:e0:30:c6:75:28:69:30:0b:b8:fc:e1:5e:70:78:62:54:fa:
         a0:4d:02:cc:2d:c9:41:f9:f5:43:43:da:6d:f0:4d:a3:a2:4f:
         60:e3:bd:c0:31:84:59:a4:5e:e4:ec:a3:b9:fa:ab:69:2f:dd:
         6f:5c:8e:a7:f2:6c:20:34:94:c0:15:97:22:ea:eb:c4:81:fa:
         dd:b3:84:ff:38:eb:3e:3a:c5:3d:67:07:c8:cd:84:85:f4:17:
         e6:ba:67:84:c2:65:24:30:6c:e8:d8:48:e3:9a:34:eb:5f:6b:
         7a:9a:48:5c:b6:49:99:f0:0a:9b:00:fe:40:af:98:b7:47:59:
         0f:96:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:26 2025 by rpki-client