Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa
File:                     927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa (raw, json)
Hash identifier:          +aTuPS8rLcthHxUoBGsSM6SuUTTSz0nk65Cd3P6hC48=
Subject key identifier:   F6:0D:78:13:7F:C2:F4:71:F6:68:C7:A7:1C:88:ED:FF:2A:91:2A:67
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584AE1967050D9A49F412DDA33C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        216.219.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:70:50:d9:a4:9f:41:2d:da:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=21e792f4-e385-425e-8fa9-35000d68cc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:05:52:3b:79:1b:58:34:37:95:9a:0d:45:2d:
                    8f:54:42:2f:5a:01:f0:a2:ad:ef:3a:8d:63:02:b2:
                    52:2e:f3:60:4e:db:96:f7:f6:00:2d:b0:5b:6f:8f:
                    23:6a:63:d7:e0:72:d4:eb:83:f0:1d:3e:ff:f9:f9:
                    ed:d2:9d:1c:4f:ab:96:80:e6:d4:83:34:47:6e:b4:
                    7b:73:02:e0:4d:8c:6d:3a:a5:81:7b:70:76:ca:94:
                    67:27:f3:f2:dd:00:2b:de:b9:27:49:4d:bb:b3:58:
                    93:e6:83:f8:e2:d9:f4:72:70:07:ea:5d:6e:cf:7e:
                    24:1d:e8:76:8b:6c:a0:f1:b7:f6:c8:af:01:ba:e2:
                    f5:fc:49:20:a0:af:b6:e5:d8:16:46:91:f8:67:cc:
                    59:fe:20:7c:d1:68:4f:42:fb:70:11:0e:ea:ac:1b:
                    8f:79:28:7e:3a:ce:f7:f7:a3:96:47:6c:96:8a:0c:
                    21:47:17:79:b9:4e:18:8a:70:62:9a:9c:d5:d6:0a:
                    89:79:08:55:a2:50:d8:49:e9:36:0f:ff:7d:d4:90:
                    ff:72:6a:81:d2:74:fb:bd:d5:56:dd:eb:df:81:63:
                    a4:30:57:b8:29:4f:a8:eb:18:4f:41:60:c9:a1:d0:
                    c9:82:d7:12:97:04:a5:d2:0c:1c:4d:dd:d9:f5:5a:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:78:13:7F:C2:F4:71:F6:68:C7:A7:1C:88:ED:FF:2A:91:2A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/927c1ab5-1e5d-312c-91e2-adb2bbbd62b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:01:9a:4a:b0:37:4e:af:61:44:3d:b6:12:1e:97:4d:23:aa:
         3c:ca:5a:72:88:fa:c7:dc:5e:67:f8:41:ca:44:46:41:3f:3c:
         a7:31:e7:c4:be:7a:c2:a2:f4:36:39:5b:1b:2a:d5:c5:fa:68:
         4a:fe:66:1c:40:9e:ca:79:1d:b2:1d:da:2c:60:30:2f:da:ef:
         55:bc:6b:ae:78:15:20:be:e1:d3:66:97:c4:d0:0b:57:ac:b5:
         12:66:cf:7c:96:65:6f:2a:24:35:17:1a:60:9d:6f:e2:d2:9b:
         dc:1a:7a:e4:ed:c7:1f:0f:cb:a4:e4:6d:ef:83:2f:81:90:d4:
         58:8e:0d:83:78:90:4a:17:09:e7:13:4d:bb:bf:c7:c2:8f:b0:
         a3:7a:06:33:ca:05:02:c0:f1:06:bd:1c:a2:b6:04:ac:9e:c8:
         01:d3:e9:30:46:89:21:bd:92:53:67:cc:96:d0:b1:08:c1:bc:
         e7:27:81:a6:67:b3:0c:f4:d4:d8:04:29:03:0e:29:66:89:a2:
         83:69:53:15:a0:ae:bd:d8:33:01:07:0a:53:7a:7d:22:10:27:
         af:27:50:83:7c:a2:26:9d:48:b3:a4:41:df:65:09:70:26:a8:
         d3:c2:fb:12:57:b2:4e:01:a1:f7:14:9e:51:b7:1c:66:a8:7b:
         4b:fd:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:49 2025 by rpki-client