Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e927cc9a-61d9-3092-910c-4c95af4e0508.roa
File:                     e927cc9a-61d9-3092-910c-4c95af4e0508.roa (raw, json)
Hash identifier:          +EgAlgafuPzTre1cYgfGUkuHWN/I9lUT4ubNcVL2OVY=
Subject key identifier:   47:88:DE:7A:53:2C:5F:D0:02:34:65:3A:10:9B:EF:34:9A:96:C3:DA
Certificate issuer:       /CN=e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e
Certificate serial:       010D0C9F4328584B0CDC2BADCA00E2FC8814DA80
Authority key identifier: 7B:C7:DE:A5:34:E2:56:D8:D4:C9:A8:1D:0C:39:9F:DE:EA:B1:CC:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e927cc9a-61d9-3092-910c-4c95af4e0508.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     401700
IP address blocks:        216.226.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:2b:ad:ca:00:e2:fc:88:14:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=0acaf315-f614-4563-abb7-d086ed6bdc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:72:cb:ec:90:5b:0f:e5:b7:68:0a:e5:9d:
                    a9:91:68:8c:e3:0f:68:09:51:e6:14:0a:2b:e1:28:
                    b0:5b:b7:c5:19:02:2a:5a:f3:83:48:44:1a:c5:09:
                    d2:99:ac:60:33:43:c2:be:e6:a9:11:07:c8:04:8f:
                    b0:98:69:59:ab:e8:67:c4:ad:b3:9f:3b:fe:9f:de:
                    d4:17:54:0d:a7:63:b1:2c:79:b6:79:ce:50:e9:c6:
                    81:f8:25:f0:3e:22:21:aa:17:80:54:18:38:77:ad:
                    5a:73:80:32:96:63:90:16:13:ef:c3:33:40:bb:7d:
                    78:c6:c3:57:d7:0a:87:83:3c:d4:03:fa:7f:a2:8d:
                    14:f3:59:3a:93:22:e9:aa:87:21:1d:fe:99:69:c5:
                    ca:22:fd:b8:c0:0b:40:ff:5c:99:ec:23:02:88:06:
                    57:63:20:dc:d6:f7:9d:95:65:b7:35:3f:88:73:32:
                    cf:c0:83:83:f8:be:a2:1a:30:7b:64:e8:3e:5c:5d:
                    39:33:eb:00:42:af:ea:2d:14:41:64:a8:d6:f5:0d:
                    6d:44:05:69:64:e9:21:34:aa:69:6a:17:d5:b1:1d:
                    c5:8f:4f:d0:85:19:0d:dd:41:e2:6e:af:70:97:4b:
                    92:3a:ec:08:b4:94:6e:18:d1:4c:b3:c2:6f:75:11:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:DE:7A:53:2C:5F:D0:02:34:65:3A:10:9B:EF:34:9A:96:C3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e927cc9a-61d9-3092-910c-4c95af4e0508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C7:DE:A5:34:E2:56:D8:D4:C9:A8:1D:0C:39:9F:DE:EA:B1:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e3c4b4ef-2fb5-4493-95bd-d34af55d1e3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:3c:2b:48:3c:66:26:17:79:79:54:4c:d9:34:84:dd:df:
         64:d6:10:7b:6a:bd:19:87:22:b9:3d:47:58:b0:99:46:91:0f:
         a0:2a:a3:20:f3:33:93:4b:23:a6:01:ca:f2:1a:10:bf:3c:a0:
         26:6d:f0:a1:f7:c1:9f:d0:eb:db:f8:5c:fa:f8:57:8f:bf:45:
         09:62:10:48:30:98:ce:4a:e7:fa:89:5f:81:51:aa:39:83:51:
         2e:e1:9f:55:39:c3:12:1c:68:43:de:ce:22:1b:a5:1a:a7:33:
         dd:2b:7a:ea:c1:44:b5:09:c5:6d:60:dc:de:20:87:8d:fb:d5:
         1f:10:a8:57:c7:52:99:d1:8e:4d:9e:db:d7:e9:4c:52:c5:9d:
         f7:d1:e8:c6:71:6a:db:e6:b3:bd:64:77:6b:61:37:32:db:df:
         55:c7:63:a3:de:c6:4c:9b:46:88:2e:bb:f8:5b:fa:31:68:2b:
         f7:d6:ed:0e:b8:07:5e:53:de:a1:85:1e:63:da:68:83:e5:93:
         d2:9e:77:2c:25:e5:5a:a0:98:bd:89:b9:c9:c1:e1:f8:07:2d:
         b2:79:91:6f:2d:67:19:de:9c:72:cb:ce:6c:a8:dd:09:2a:09:
         d7:e5:ef:09:9d:21:86:00:dd:1c:87:bc:88:3e:75:6b:2b:25:
         ae:9c:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:13 2025 by rpki-client