Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa
File:                     5e15a5fb-b275-3746-9618-c51323aaf339.roa (raw, json)
Hash identifier:          33wOphYwTEkqycqxwJn2B4tq0QkbOVMtMuDtR2zCrII=
Subject key identifier:   29:87:97:DA:01:6B:79:29:B2:ED:C8:22:4E:37:17:54:C2:6D:9B:2B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B2066D80BB85241C60B762440
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     1239
IP address blocks:        216.227.140.0/23 maxlen: 24
                          2001:49f0:d004::/48 maxlen: 48
                          2001:49f0:d010::/48 maxlen: 48
                          2001:49f0:d026::/48 maxlen: 48
                          2001:49f0:d047::/48 maxlen: 48
                          2001:49f0:d09a::/48 maxlen: 48
                          2001:49f0:d0d0::/48 maxlen: 48
                          2001:49f0:d0e5::/48 maxlen: 48
                          2001:49f0:d0f8::/48 maxlen: 48
                          2001:49f0:d126::/48 maxlen: 48
                          2001:49f0:d127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d8:0b:b8:52:41:c6:0b:76:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=91ccbddc-8381-456f-861b-8339ce42b001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:90:66:ba:a8:cb:1f:4a:85:ed:94:50:38:
                    20:43:a3:d2:3d:16:0b:7e:3c:87:5b:9f:61:57:23:
                    c0:83:59:53:ba:87:72:28:f4:1e:55:7e:22:cb:a4:
                    5e:8a:67:45:7b:5b:d4:db:37:fd:33:77:2b:45:5e:
                    4b:2c:14:ec:71:a9:99:71:fa:97:45:ad:22:ef:90:
                    5a:95:87:90:af:0d:2f:99:90:79:b1:01:e8:0d:92:
                    50:b0:80:a6:b5:78:5c:8e:17:44:6d:83:ee:84:60:
                    65:77:71:af:cd:ec:dd:bd:c0:31:62:a0:6d:67:30:
                    d1:76:86:9f:8e:2c:e0:3f:2f:e1:f3:b4:9b:0f:0f:
                    22:5c:c6:f4:b3:37:9c:e1:90:e0:42:f6:25:8c:85:
                    35:e7:95:0b:98:df:64:c3:62:8c:b9:39:65:10:ae:
                    08:29:f8:34:cf:4b:eb:d0:12:d7:ae:52:14:96:9e:
                    a1:12:41:10:86:cf:d6:d2:be:f2:60:b6:ec:5c:d2:
                    ee:e0:f6:ad:e4:49:5d:1a:41:e2:d7:7c:a1:a2:df:
                    48:3f:e8:7b:c0:66:c3:b2:39:05:cb:89:3f:47:85:
                    ee:b5:11:b6:f4:f5:c3:fd:67:a4:35:60:60:77:48:
                    b5:19:d9:df:e7:e7:c7:54:49:8c:5e:83:48:91:1e:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:97:DA:01:6B:79:29:B2:ED:C8:22:4E:37:17:54:C2:6D:9B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.140.0/23
                IPv6:
                  2001:49f0:d004::/48
                  2001:49f0:d010::/48
                  2001:49f0:d026::/48
                  2001:49f0:d047::/48
                  2001:49f0:d09a::/48
                  2001:49f0:d0d0::/48
                  2001:49f0:d0e5::/48
                  2001:49f0:d0f8::/48
                  2001:49f0:d126::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:2f:89:38:ff:da:b2:bb:89:3b:0d:5a:87:a7:d3:d1:c0:
         bb:03:e1:b5:cc:45:e1:de:2a:4f:96:f5:b4:04:b2:25:22:6b:
         ae:16:7b:7f:30:d0:2e:0a:28:ff:9a:ac:fb:c1:14:61:17:49:
         7d:79:c9:26:55:69:a3:dd:58:b1:63:6b:77:08:8e:e3:2b:c1:
         ea:d3:2b:5e:d9:df:4b:89:4f:1f:38:bd:ee:71:ad:5f:76:f8:
         be:ea:55:64:90:cf:74:60:b1:4b:e6:90:4c:00:a5:d4:8b:ec:
         d7:df:cc:cf:91:38:c4:06:ca:18:2f:60:74:6d:d7:26:b5:ce:
         4b:58:d0:f4:9c:53:ec:d5:1a:c3:04:19:37:4f:33:f5:be:d7:
         14:9d:c4:26:ab:0d:f4:3b:95:55:7e:dc:b1:e4:e7:5e:e4:19:
         4c:a4:87:cd:a9:7a:47:74:d9:09:5d:83:81:1b:2c:7f:c1:f7:
         99:f5:b6:8c:d9:5a:0f:c1:8d:c7:68:9e:e1:6c:c3:b6:57:3a:
         78:f4:63:89:09:3f:95:7f:76:45:04:8f:68:bd:4f:27:b2:96:
         b3:37:3d:f4:d2:22:f1:98:e9:d7:ce:d3:fb:30:aa:1f:14:cf:
         b4:3f:02:cd:25:47:d8:0c:13:cd:28:a5:5c:f1:80:72:b3:4e:
         3d:bb:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:03:06 2025 by rpki-client