Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa
File:                     e9618a84-cd25-3185-ba38-a4cc840a603b.roa (raw, json)
Hash identifier:          ++N5Gem8+GvNYXjn5sPtuWDGOYCoQjBmfuJ3dKWorTA=
Subject key identifier:   74:8E:3B:5C:87:EC:5B:20:59:62:E3:D0:2B:FD:DC:4B:B0:DE:FB:CC
Certificate issuer:       /CN=3416eb84-d1fa-4d16-850d-b6024c13b511
Certificate serial:       010D0C9F4328584ADA9BC258BC4880B85FF70A24
Authority key identifier: C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     21930
IP address blocks:        198.202.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c2:58:bc:48:80:b8:5f:f7:0a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3416eb84-d1fa-4d16-850d-b6024c13b511
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=18b633e2-f2cb-4048-9b47-907aaa45dd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:a4:cf:33:a6:a7:26:f4:47:25:2b:f4:7c:
                    cf:48:4d:75:db:a9:af:f7:5d:4e:fb:37:e0:46:c2:
                    a4:53:98:f1:b3:69:0a:95:cf:fc:5d:2e:9e:63:a7:
                    f1:d2:b6:31:c7:9b:86:26:d5:03:bb:a7:42:4c:74:
                    8b:c6:38:29:6f:9c:d2:95:3f:aa:e0:2e:7f:cc:cc:
                    b6:fc:2b:af:d3:bf:d4:4a:07:0c:89:78:64:7d:18:
                    56:b8:85:85:65:ab:1e:7d:f5:67:2c:fc:7c:02:36:
                    20:cb:69:c6:9a:ea:5e:85:f8:b2:4f:c9:15:c7:8f:
                    2d:15:f1:04:03:47:b2:19:58:75:44:c1:b0:9e:69:
                    9c:ed:a4:68:77:17:d1:27:8a:af:bb:b4:7c:9e:43:
                    0e:cc:46:f0:c5:41:e4:85:7e:9c:b5:f4:00:40:c2:
                    bd:9a:d4:44:7f:a9:fe:b4:78:00:67:5b:c0:d1:fd:
                    55:26:4e:e0:b0:b3:3b:ad:b2:9c:f3:c9:85:f1:36:
                    27:ea:bd:cb:32:84:87:f8:87:4d:26:66:53:bc:fa:
                    db:2a:58:82:c3:3e:3e:c9:5c:4a:03:0e:72:f4:74:
                    d4:05:90:0d:0b:f2:3b:f8:96:d3:82:8c:56:13:bb:
                    38:ab:20:55:cb:e9:63:d0:ca:9e:79:3c:d3:24:a4:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8E:3B:5C:87:EC:5B:20:59:62:E3:D0:2B:FD:DC:4B:B0:DE:FB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/e9618a84-cd25-3185-ba38-a4cc840a603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:c5:f2:ea:cc:29:ee:7c:e5:e1:53:c8:2d:d9:43:ce:f2:
         47:9b:9c:09:98:52:39:7c:85:24:3b:e2:46:b5:05:41:84:3e:
         bf:6e:2f:39:36:4c:95:ac:a8:cc:79:a4:56:58:2d:63:c7:b2:
         8c:21:f7:21:96:39:78:1c:5c:a7:ee:7e:ff:3c:3d:f6:9b:60:
         80:ca:13:7e:3e:59:98:b2:00:f9:46:5a:58:4a:0b:fc:52:4c:
         48:1e:4b:95:5b:a9:77:54:3e:6b:ba:89:7f:60:fc:d3:78:53:
         d6:4c:3c:d5:99:61:cb:e6:32:00:d5:f9:4d:d9:c1:55:a8:9d:
         6e:f5:3c:17:bc:ce:30:d2:aa:d6:ef:fa:39:18:65:5e:74:a9:
         d1:d8:57:52:1d:da:38:c4:3c:a2:84:84:7c:03:9c:17:80:78:
         af:b1:8d:0a:52:7d:58:08:d2:88:54:3f:f4:32:11:e6:89:d2:
         35:84:e6:47:40:24:e2:4d:5f:86:14:6d:cf:29:7e:e7:d8:dc:
         1f:d8:79:0a:47:4e:5e:37:68:8c:0b:56:83:33:05:3f:9e:9e:
         94:4a:8a:68:45:12:9f:84:cb:0a:da:db:b8:f3:5f:ca:83:31:
         43:8f:31:2b:0b:a9:1b:7e:90:e3:fc:a1:b7:7a:c1:5e:c9:eb:
         7a:9d:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:11 2025 by rpki-client