Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
File:                     a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json)
Hash identifier:          2BhRJYgUzYhSzFIoqu20a4/f5IrkTTKwUENcoQ5dwvA=
Subject key identifier:   88:09:AE:99:EC:C5:44:65:09:4D:1E:99:9E:50:E0:F1:BE:62:CD:AE
Certificate issuer:       /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
Certificate serial:       010D0C9F4328584A9D30E3A702C7625D06250280
Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     12059
IP address blocks:        216.223.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e3:a7:02:c7:62:5d:06:25:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=029477f2-cfa2-4fe6-8875-235885b7c947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:3a:1f:5e:07:81:25:35:a9:f2:6d:20:be:
                    05:7d:0d:d0:eb:02:ba:aa:b9:8c:1f:a0:74:27:86:
                    2f:34:89:3e:2d:0e:e0:7b:b3:2c:2d:99:7d:53:57:
                    0b:0c:d1:12:d1:61:4b:53:95:6c:c6:9b:03:15:8d:
                    4e:b0:1a:b3:23:20:cf:2a:d6:a6:97:0a:e0:c8:9e:
                    dc:81:55:00:71:d6:5c:34:1c:51:a8:3c:ba:22:86:
                    9e:61:0e:3f:37:95:43:78:94:20:57:be:bf:3e:3e:
                    76:c0:b7:be:da:ff:9b:a4:a0:5b:b7:5d:8b:55:60:
                    f9:bb:a4:3e:c4:1b:f7:82:48:0c:ce:e3:28:ab:8f:
                    74:96:4a:c4:22:35:58:f2:f7:1e:30:05:8d:e8:2d:
                    c4:6f:96:59:28:e2:2f:95:13:b3:fa:9b:92:e7:cc:
                    05:56:33:34:ec:63:81:7a:92:43:c4:40:78:f1:b9:
                    81:36:4a:50:f6:bf:99:00:b4:46:1f:ca:1c:c9:4f:
                    77:24:ba:1e:6c:4b:af:1a:e3:ab:d9:7c:a8:6f:ad:
                    d2:76:ed:f9:6c:01:e6:7c:10:12:0c:28:2b:43:c9:
                    e4:3e:19:17:31:39:f0:c6:58:a6:fe:8d:ac:8d:ff:
                    40:2d:78:50:75:43:20:7d:71:ca:87:9a:75:ce:aa:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:AE:99:EC:C5:44:65:09:4D:1E:99:9E:50:E0:F1:BE:62:CD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:d9:cc:52:14:26:25:54:d9:4b:54:c6:93:fd:33:25:62:
         bb:36:0e:ba:94:c7:ec:8b:f3:3f:7a:ca:f7:bf:40:32:8f:3a:
         71:72:09:31:ea:78:85:d5:b1:b5:73:e7:f8:9c:6c:66:db:aa:
         96:9e:64:93:60:a2:15:06:73:4b:b3:27:82:18:ef:6a:42:0e:
         e6:15:1f:11:86:8f:21:24:4f:d6:6b:63:f8:be:9e:50:19:7a:
         7b:ff:22:04:13:00:d1:f6:1e:12:a8:fb:2c:11:45:90:8e:2f:
         c1:82:41:72:a6:bb:6d:d6:30:cc:8a:67:1b:74:66:95:d2:8b:
         e9:5c:82:38:f0:d1:14:84:16:f9:70:e3:dd:0d:c2:14:e7:d1:
         67:32:c6:de:b6:a2:73:bf:d9:9b:a0:1b:ca:7a:4e:a4:d9:b9:
         60:fc:c5:ad:69:b6:8d:82:c9:d2:bd:69:b5:0d:31:e3:68:e8:
         f6:48:a2:3e:a4:34:4f:91:0d:79:a5:1d:1d:be:d6:a7:2a:8b:
         12:e5:dc:9a:e4:e5:ae:8c:cc:1e:06:a9:ce:ee:fc:5e:a0:b1:
         06:9f:87:15:ab:c2:bf:0c:b3:af:b0:51:2d:5c:2e:08:83:31:
         0a:69:7c:1f:f8:5b:80:c7:5b:2c:0f:a7:38:62:b5:91:40:10:
         31:61:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:03 2025 by rpki-client