Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa
File:                     2be77735-09fd-3a49-9a9f-3b91769f66c5.roa (raw, json)
Hash identifier:          4dLYqDSzE69jLdb3EP/rD5t+J5XG5XO9P3IMPoqqYy4=
Subject key identifier:   3B:AA:F8:B2:A8:D4:A3:69:7B:58:76:AE:3B:F0:A2:8F:35:7A:AF:DC
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584AB650E9910992F93543E16F00
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        216.238.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e9:91:09:92:f9:35:43:e1:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=a253e87b-8be9-4dd5-ad55-9ed7c3ae577e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:5d:be:d5:8d:8b:58:ec:a7:14:d0:05:f9:
                    93:cb:c3:65:f5:10:20:b2:bb:d7:06:57:39:7a:8d:
                    64:91:8f:fb:d2:bb:83:8c:6d:e7:c3:db:14:ec:ea:
                    46:0c:59:50:94:ad:dd:0a:f0:8e:01:03:3b:65:cc:
                    5f:88:83:36:60:71:a1:a7:04:c3:cc:a7:f7:7a:90:
                    67:16:d6:a2:37:cf:72:9c:b2:8e:f8:a9:4b:c8:06:
                    17:2c:05:3d:fd:4f:c4:58:e7:0a:95:1d:ad:f0:23:
                    a6:65:dc:b3:74:d9:ae:fa:14:e7:fe:9a:ac:8e:52:
                    0f:70:e1:f6:ca:f0:d0:b4:8b:fc:34:7c:1b:e4:64:
                    c8:9e:4b:e1:9c:33:4f:3c:78:d6:90:44:b9:2e:55:
                    cd:1f:cc:df:c5:3a:ff:0c:e4:27:cd:17:82:63:8c:
                    ee:e4:66:b5:ad:34:65:e9:e5:c1:cf:5a:f6:b7:83:
                    a2:ab:77:d0:41:16:e2:ba:be:bd:fe:0a:e1:db:58:
                    a9:13:ef:75:47:f7:8e:41:38:75:40:67:1b:49:52:
                    b7:ca:01:18:d6:87:5c:6f:ca:bd:f4:a8:c5:08:c8:
                    b8:54:ed:f5:9a:c2:61:6a:10:00:00:b5:40:33:dc:
                    7c:13:85:1c:76:d6:e5:b5:3c:df:ba:7b:46:3f:6e:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AA:F8:B2:A8:D4:A3:69:7B:58:76:AE:3B:F0:A2:8F:35:7A:AF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/2be77735-09fd-3a49-9a9f-3b91769f66c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:e9:cb:c2:f4:30:3d:b6:e6:02:3a:ef:d6:82:88:b4:96:
         31:cf:4c:b2:03:2f:2e:5b:05:9b:47:19:c5:e5:23:17:0e:24:
         2c:27:12:06:35:a5:d7:bf:ef:a7:02:08:0a:6f:a5:80:37:0d:
         a4:b9:8f:75:06:31:72:c4:62:f0:80:c9:1c:b0:66:a3:9e:e1:
         a3:ad:09:01:11:68:53:a4:fa:1d:1a:5a:52:2f:0e:a9:05:a9:
         c6:24:99:aa:af:e5:e3:78:b8:b4:14:8b:18:4d:41:eb:91:69:
         af:96:d2:4e:fa:df:68:78:a5:cf:b0:28:bb:41:e9:87:4d:95:
         3c:ba:78:c8:1c:5b:ad:a5:d3:9b:71:c2:8a:83:df:58:2c:75:
         c6:62:8d:41:5f:30:0d:e4:29:c6:eb:55:1f:82:d3:36:02:ee:
         dd:2f:c5:63:23:40:07:05:21:6f:1c:2a:71:1d:ae:eb:86:e7:
         82:f3:4f:f2:e2:e2:aa:4e:cd:32:4a:40:9a:94:c6:67:5c:f9:
         cf:29:63:dd:64:29:92:98:0a:41:49:bb:df:dd:fb:9f:22:52:
         35:c2:b6:8f:33:b1:2f:09:db:d5:e6:33:42:94:18:b6:b4:12:
         ab:e8:b9:ec:e8:2e:66:3f:bf:5b:2c:ff:91:b2:a0:af:e0:39:
         2e:03:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:54 2025 by rpki-client