Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
File:                     3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa (raw, json)
Hash identifier:          A4ea8UEWQ8PmSyhpijSRrfYFlj/Vb4RfBOBmUj37Y4s=
Subject key identifier:   8F:82:F3:CB:41:19:5A:F3:EB:BF:EF:F8:86:F3:35:54:34:04:54:33
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584A9BCB6C281FB558E1E1F98BC0
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     26356
IP address blocks:        216.86.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6c:28:1f:b5:58:e1:e1:f9:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=4fb9a926-4298-431c-b200-c76b0a4c2668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:0d:f2:f4:4f:26:ec:35:c8:1e:1d:07:00:
                    25:26:42:68:f7:2c:04:2f:7a:71:2a:c3:ef:35:60:
                    f5:8a:ca:59:2e:ff:30:c6:57:22:29:da:6d:37:df:
                    ee:a2:74:12:13:9a:40:87:91:7b:13:12:c3:19:1d:
                    5e:44:36:2c:df:f4:7b:db:96:09:96:bb:f0:20:a8:
                    73:9b:5c:60:79:4f:cb:11:27:a9:c5:5e:7f:4b:ee:
                    66:b1:c8:8c:03:8e:e3:76:b3:f9:55:40:5f:b7:e3:
                    c9:ee:de:23:e6:8d:a7:e1:64:7e:b9:02:3d:92:90:
                    93:6a:85:c2:33:16:24:17:30:f1:e9:48:56:89:f9:
                    c2:5d:0d:d3:0f:d5:6b:5a:52:4a:0c:8d:0d:66:92:
                    6e:57:ee:bd:60:7f:fc:2f:51:cc:8c:f5:50:bd:50:
                    5f:4e:b1:0e:8e:43:ff:ca:42:ab:3e:1b:19:c9:af:
                    c0:bd:a7:82:ac:45:12:31:6a:1f:78:7d:4c:55:4b:
                    55:5b:8a:96:91:2f:46:a7:5b:82:28:5d:c1:27:a8:
                    2b:88:a3:fc:42:05:bb:60:41:07:36:2d:9e:7f:29:
                    ea:0f:7a:53:94:ec:34:76:41:f7:47:6d:c3:99:b4:
                    8a:95:26:63:c8:ac:0a:3b:f8:4a:7e:18:46:4a:4b:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:F3:CB:41:19:5A:F3:EB:BF:EF:F8:86:F3:35:54:34:04:54:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a4f7762-0e9b-325f-ace1-81d1e1f109de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.86.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:3c:f2:29:cf:04:b1:25:30:ba:4e:47:1b:59:7c:e3:cc:
         b0:00:2c:71:c2:35:06:b5:dd:3b:f1:09:25:18:13:06:23:c9:
         68:45:af:3f:4e:9f:ad:0f:0a:98:03:0a:22:05:ca:f0:93:02:
         b5:2c:e7:6f:0c:e5:74:81:5f:b0:4d:76:fc:7a:b1:69:64:43:
         30:0c:34:6f:1e:1a:59:47:8e:e8:55:36:28:e1:73:47:53:a4:
         48:7f:28:5e:62:7f:19:1f:d8:da:ca:95:c7:9f:03:0c:c1:a7:
         8e:cf:97:f8:93:14:ba:ce:7d:ff:3a:9b:39:eb:d1:b7:3d:5f:
         b7:fe:29:ff:e7:36:2f:f9:76:ae:39:11:7a:48:50:b9:1b:a9:
         38:80:1c:90:12:02:bb:c5:42:06:14:68:eb:b0:64:a1:98:9f:
         18:52:8f:fc:c4:14:e3:2e:88:68:00:66:f6:c7:40:5c:d4:41:
         3d:0d:43:45:a0:01:e8:d2:6c:e2:5d:d1:b1:1b:b3:8f:c7:1c:
         30:90:76:33:0e:60:bf:b3:db:0e:9e:6d:7d:41:1a:ba:e5:fd:
         a6:88:4f:2e:c2:0f:16:c3:1c:27:e3:a6:f6:b9:6d:0e:2e:9c:
         ed:a5:5e:24:92:69:18:68:5f:c9:8f:9f:90:2f:49:3f:1f:d4:
         36:56:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:28 2025 by rpki-client