Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
File:                     7b4cebea-3564-3ced-b43f-9712c6e282a5.roa (raw, json)
Hash identifier:          QIkb+ka4jC8wTIeAS/3r7IGzR4s6nTuN737ZTjprfGk=
Subject key identifier:   32:A2:82:AF:17:88:15:97:58:1B:30:78:1A:12:B6:7B:4B:C5:DE:10
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584B84E7651D8CE83EA87D7AD880
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     1054
IP address blocks:        216.40.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:65:1d:8c:e8:3e:a8:7d:7a:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=1ac44928-571e-4658-83b2-7043a44e675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:b4:53:db:f4:7b:c2:89:91:f7:85:42:a1:
                    2e:b0:4f:16:06:92:32:a0:a3:84:0e:88:ce:12:43:
                    eb:eb:89:38:bd:a3:0d:ff:b6:a8:56:03:e1:8b:00:
                    35:12:8c:43:6c:9b:09:e5:03:21:79:c7:f9:44:cc:
                    f6:43:46:9b:61:1e:ed:aa:c6:4c:36:0d:f1:33:60:
                    af:21:49:74:34:34:58:cd:47:97:63:2b:8e:73:ca:
                    ac:29:1b:79:3b:07:ae:df:1b:33:b7:b5:db:10:59:
                    f7:fa:18:43:b4:bb:cb:09:e7:e5:02:51:2a:f2:b3:
                    84:b6:a4:17:f0:4f:8b:7b:f5:ee:ea:82:bd:e2:a7:
                    d8:8d:f0:21:d2:d4:ec:85:f0:9e:6c:26:5b:c4:3a:
                    b4:18:bb:5e:98:81:23:0e:77:12:df:21:4d:35:9d:
                    05:89:3d:bb:04:9f:5f:5c:32:56:39:e5:77:21:52:
                    1b:06:63:10:16:f3:68:e4:ed:c6:21:ce:67:be:ee:
                    81:6e:7f:c9:80:6f:cd:70:77:3e:93:0c:22:83:a5:
                    a6:69:37:c5:b6:8c:0e:e2:08:d6:29:53:b3:11:39:
                    1b:0a:34:52:8e:be:69:3a:c7:cd:36:1e:3f:83:7b:
                    b8:20:f9:cb:63:f9:ec:32:da:a1:55:fe:6f:6e:61:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A2:82:AF:17:88:15:97:58:1B:30:78:1A:12:B6:7B:4B:C5:DE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:ed:cb:5b:c1:08:d1:26:92:e1:17:cb:5b:80:e7:d7:60:
         1b:d5:14:79:02:f4:93:1d:8e:5a:f7:6b:8e:6c:6d:50:86:b3:
         16:48:f7:c1:30:55:26:35:9e:9c:36:f5:3c:21:f0:71:b9:68:
         6b:ef:2a:2a:86:0e:c8:f6:eb:f0:82:01:41:cd:23:58:5b:f4:
         32:e0:52:73:5c:f3:76:99:dd:f8:e9:46:8b:0c:57:71:e0:9a:
         ff:49:f8:08:6a:3e:2f:ce:07:5a:14:b7:9f:56:9f:e8:2f:06:
         75:1e:f2:d9:9c:27:9f:9e:3d:03:11:e1:66:84:5a:d4:ee:63:
         ea:ee:d1:72:39:05:a5:d2:42:c5:9e:d4:d7:a5:50:2e:49:51:
         c9:08:bd:0a:82:ff:e6:74:06:6e:48:e2:6e:96:7f:70:2d:7c:
         3b:e4:56:4f:aa:7e:84:db:25:4a:f7:53:d9:b6:f3:d0:3a:db:
         d5:93:5f:16:84:b9:9a:d3:16:26:a2:55:18:8f:91:eb:9f:4c:
         40:38:bd:4a:ab:83:db:79:c6:b2:9c:4b:50:8f:cb:60:15:80:
         ff:0b:fe:36:e2:8d:e6:75:59:95:14:03:74:1c:64:00:6c:e3:
         7e:63:35:5e:6a:a1:cb:f4:c6:da:f1:65:1e:73:9e:ae:04:8a:
         d4:9c:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:20 2025 by rpki-client