Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fda5fd62-5b0a-3e43-af7d-a6ba92e76778.roa
File:                     fda5fd62-5b0a-3e43-af7d-a6ba92e76778.roa (raw, json)
Hash identifier:          y4F8BPS00wfQBgWeYLIpoUM21F4crhaI9rCtCaZI1aI=
Subject key identifier:   F3:A3:87:07:82:28:FA:52:13:F4:86:CE:7A:FB:6D:67:AC:49:37:15
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584AA160DBC08482C415EB9888C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fda5fd62-5b0a-3e43-af7d-a6ba92e76778.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     15197
IP address blocks:        216.187.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:db:c0:84:82:c4:15:eb:98:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4d1a2038-f203-4d40-b49c-adf603be6c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:dc:d6:a0:c3:9a:ba:1e:c0:5e:1c:ff:38:
                    e5:b5:ac:67:94:ff:fe:31:a0:ae:c3:f4:83:14:a9:
                    08:43:41:87:3f:e9:92:2a:e0:6f:c3:66:3f:37:4f:
                    ea:3e:16:02:15:55:9d:f1:eb:50:22:23:ab:ad:08:
                    ee:93:46:7a:91:1f:f9:54:ef:6f:c9:18:d1:f2:54:
                    a2:61:11:9b:d5:67:00:be:2c:d7:bf:b0:e2:48:01:
                    82:4d:4b:7f:90:2a:ed:d4:23:f4:60:71:01:91:b9:
                    df:ea:e0:fc:9e:90:da:b6:75:f3:00:c5:2b:cf:2a:
                    80:53:ae:ae:61:86:85:d1:03:51:9f:86:1e:0f:8d:
                    f0:67:0f:c3:d8:9a:02:f5:06:6a:bb:be:47:bc:f2:
                    84:c9:cd:9f:88:d3:16:c4:ab:bf:77:0b:a3:a5:63:
                    a4:a9:f0:47:b0:a8:67:0a:80:46:e9:42:83:da:3e:
                    8a:09:7f:aa:ed:1e:ac:a9:c5:f2:e1:c4:d1:c7:a1:
                    79:1a:17:43:8c:ed:40:22:b9:bd:fc:fa:95:80:16:
                    6f:33:99:8b:94:74:9b:aa:56:6d:e6:09:d2:e9:d3:
                    20:10:38:a4:c8:0d:82:c0:51:b7:4a:f2:28:07:bf:
                    30:b0:d8:c9:54:b3:3c:e9:ba:5d:71:ee:02:fe:50:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:87:07:82:28:FA:52:13:F4:86:CE:7A:FB:6D:67:AC:49:37:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fda5fd62-5b0a-3e43-af7d-a6ba92e76778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.187.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b4:5e:a3:c3:fc:a9:f5:78:fe:7c:15:4b:4b:b8:77:6f:b8:
         55:dc:58:3f:21:41:aa:92:31:b1:48:72:f1:b4:9d:99:9b:97:
         c6:e9:ae:d7:f1:78:1c:8c:80:1c:85:0b:fe:0d:4c:e0:90:1f:
         da:70:47:0d:3b:f0:de:6f:a7:5a:a9:7d:db:64:e6:1f:29:eb:
         62:44:31:2f:71:9e:7a:f2:c4:cb:b4:8a:a2:fa:ff:0f:2d:31:
         ce:9a:75:7b:4a:de:84:d2:b6:18:14:91:ec:22:fe:f3:c7:d2:
         07:39:4c:89:27:b2:de:72:ba:63:2f:4f:54:ca:a6:3b:d0:ec:
         44:72:1e:da:7f:25:61:80:1c:27:27:d6:0c:4d:ea:bc:a2:74:
         4e:5d:3a:54:f7:cb:23:70:cc:09:18:27:d5:18:0f:a5:88:d7:
         ae:64:4b:a6:d5:11:43:b6:ea:c2:05:f6:9f:d6:2d:b3:bf:c1:
         5c:76:31:5a:3b:a6:b4:3c:54:bf:e4:44:c4:f5:22:3b:34:8a:
         c2:63:f4:e6:59:15:7a:91:ab:a0:2b:e8:ab:8c:18:cd:95:1a:
         f5:e1:29:fe:6f:b8:a1:42:99:39:cd:5d:cc:59:e5:6a:53:03:
         81:d5:17:3f:d3:09:83:48:04:2e:fa:ac:3e:3a:bf:ba:80:dc:
         33:ad:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:38 2025 by rpki-client