Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9afa225-c5c0-3c33-8eb4-0c5c8a5b3cab.roa
File:                     d9afa225-c5c0-3c33-8eb4-0c5c8a5b3cab.roa (raw, json)
Hash identifier:          bX2+K8zHmZffxASlJHTtC0dUI3MSvAis1g+sPYYWoA4=
Subject key identifier:   F9:D6:0E:00:03:D5:90:E8:F5:E5:A7:50:15:32:32:76:A8:DC:69:9E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AF0F155C99675E51E1948D000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9afa225-c5c0-3c33-8eb4-0c5c8a5b3cab.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     5065
IP address blocks:        216.133.154.0/24 maxlen: 24
                          216.133.155.0/24 maxlen: 24
                          216.133.157.0/24 maxlen: 24
                          216.133.158.0/24 maxlen: 24
                          216.133.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:55:c9:96:75:e5:1e:19:48:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=0662b9c2-7691-4cb7-b2cb-f7ab908ce836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:0d:01:9f:e1:02:d2:04:9e:fa:0f:8d:a2:
                    b7:5c:90:50:3a:0f:6e:7f:9e:5e:e5:54:66:03:85:
                    fa:0a:fe:cb:45:ad:1e:a0:61:69:4e:d4:06:dd:5b:
                    af:cc:54:e0:a3:6d:87:11:bf:df:04:6a:67:c0:8e:
                    1c:e9:4c:e9:27:0e:c4:2f:61:1a:81:13:1d:ce:56:
                    99:3a:1a:2a:c7:11:94:c5:46:a0:f2:f9:6c:4a:be:
                    93:24:ce:03:10:ed:8a:c7:c0:9d:34:6d:e7:20:16:
                    db:d6:8e:08:3f:78:75:2e:d1:a2:aa:65:fa:15:4e:
                    e1:e4:5e:9a:8c:25:95:d4:a5:ed:ba:94:14:0e:0e:
                    70:74:77:d9:7a:d0:a5:7c:e9:77:92:16:30:a5:31:
                    50:0f:de:95:2e:25:1d:c0:b1:14:f5:34:02:c9:bf:
                    db:58:45:fb:8d:85:30:3c:0a:4d:ad:c5:e5:1e:02:
                    d8:d3:f4:9b:68:c5:69:bc:1f:ae:2e:84:79:85:85:
                    4b:24:9e:08:e8:78:9d:4a:4a:75:b6:34:3a:f6:18:
                    f2:29:b8:0e:65:d8:58:b8:63:9c:14:e4:bb:e3:a2:
                    42:a2:db:be:da:f3:10:f9:f1:25:38:df:0c:f2:94:
                    2c:b4:a6:ce:ae:1c:5f:37:9a:ad:f6:0b:00:d5:4e:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:0E:00:03:D5:90:E8:F5:E5:A7:50:15:32:32:76:A8:DC:69:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9afa225-c5c0-3c33-8eb4-0c5c8a5b3cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.133.154.0/23
                  216.133.157.0-216.133.159.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:ed:79:ae:da:64:56:fc:d7:10:c3:b8:26:7e:2e:bd:ac:
         89:b0:a9:7c:cf:1d:e7:a4:55:00:9c:83:73:7a:b6:87:10:26:
         80:9f:e6:51:98:8d:2e:54:4b:03:53:b2:e2:1b:8d:70:05:ef:
         55:0b:0c:ff:2c:27:86:a0:de:76:72:0c:74:39:7f:b5:0d:70:
         2a:ff:9b:5e:01:b7:74:29:4d:72:9c:ae:00:ba:43:e9:33:92:
         0f:7f:33:32:7b:fe:28:10:cc:04:a1:b3:ff:ba:9e:f3:fe:ce:
         2c:b3:f5:51:1e:ca:37:93:8d:34:07:80:6d:54:1f:98:03:9c:
         b7:64:ff:33:53:db:ad:ba:8a:a7:c5:bc:27:8b:d4:9a:e6:b8:
         89:1e:d3:a5:24:88:6c:df:52:0b:54:90:ec:98:db:b6:40:eb:
         71:b1:b7:5f:87:54:d4:96:30:f7:b0:95:ad:5e:6c:f9:03:6e:
         96:10:d3:90:48:e6:ad:9e:8f:d6:d1:5b:fc:0a:bd:b6:a6:0e:
         33:6b:22:63:36:8b:46:ad:4c:83:56:ae:f1:01:d7:b4:b1:de:
         a0:d1:8f:95:5b:84:d7:a2:b7:47:60:3f:a1:54:31:b1:a6:26:
         2a:70:d9:cd:a7:c6:e4:bc:ce:50:e2:68:96:7c:97:68:91:ba:
         71:b3:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:35 2025 by rpki-client