Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
File:                     3142ff37-0d80-3fda-bfa7-23a560c639d8.roa (raw, json)
Hash identifier:          yFO2CJj3U/Oq2IF8aGg3KCCFbIgC8tu+SWJJZixXCAg=
Subject key identifier:   55:20:CB:42:F5:AA:86:F3:7D:5A:65:74:12:B8:5B:1F:0E:11:81:D6
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584BC10ADF6E3CF430F83E44D820
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     212238
IP address blocks:        216.158.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:df:6e:3c:f4:30:f8:3e:44:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=dd29cf39-8cfd-4ad3-a411-67ae1bb61cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:50:6e:4d:c8:10:39:7a:9f:45:1a:77:c9:
                    bd:52:3e:5a:cc:46:b2:69:96:81:28:7b:c5:aa:24:
                    55:da:d4:26:26:30:3b:bc:51:c9:d3:83:00:97:b1:
                    25:61:34:e6:e5:1e:26:48:ac:3f:54:ac:d2:40:c1:
                    28:0c:79:f0:7c:2e:3e:7d:65:3f:b4:04:22:12:6d:
                    7c:f0:bc:75:dc:34:6f:00:4e:2d:47:36:a1:7e:de:
                    0e:db:9c:0c:83:80:2c:db:1a:72:17:5d:79:ec:a6:
                    3d:78:0c:59:f7:97:a3:60:69:04:65:71:49:bb:d9:
                    30:e6:6b:52:f5:06:0d:2a:93:00:05:41:a8:6b:fd:
                    85:4b:98:91:03:23:8c:23:62:05:50:da:0a:6d:d7:
                    ac:03:1b:82:99:64:b6:bb:92:e3:ad:f2:52:bf:50:
                    12:8f:c5:48:11:10:11:f3:b0:8b:d0:45:4b:3f:dd:
                    8b:b9:1b:3a:81:97:a2:60:fd:c1:10:96:25:f6:82:
                    9b:ee:cd:1d:e1:1d:2a:7e:05:45:43:c2:be:3f:e3:
                    3d:0d:7c:7e:8d:52:8d:aa:c9:cc:30:38:46:76:fc:
                    a5:e8:c9:97:04:b3:9c:1c:2a:67:45:36:fa:29:ad:
                    42:7d:f9:b3:20:6a:9a:d9:5e:23:37:7c:18:23:09:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:CB:42:F5:AA:86:F3:7D:5A:65:74:12:B8:5B:1F:0E:11:81:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/3142ff37-0d80-3fda-bfa7-23a560c639d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:27:49:ce:51:c7:5a:1b:02:2e:00:18:8b:95:12:10:0a:52:
         ca:3a:d6:9e:3b:2f:43:bd:9b:21:75:41:38:5b:06:aa:4c:3f:
         02:2e:eb:f1:2c:23:3d:8a:7b:db:49:26:97:e1:08:05:5a:3b:
         42:51:f4:6b:8e:e7:b1:28:68:4f:da:c9:3e:b2:f9:32:74:9a:
         99:a4:2a:8b:b3:61:22:d5:c0:3c:03:83:7a:9e:01:01:e8:c4:
         04:9b:3f:aa:5c:7c:cb:80:2f:ea:4b:3b:bd:23:cf:02:75:85:
         81:b2:bd:96:87:85:02:9a:55:86:57:33:a2:c9:c2:85:42:35:
         6c:99:04:1b:1e:a7:ca:c3:f4:05:ec:50:51:e8:b0:eb:e1:fd:
         a6:e6:fd:14:3e:e0:b7:1e:1d:13:be:fa:a9:01:57:9c:9c:5f:
         3d:9d:dc:e6:02:f0:fe:fd:74:e7:0d:e7:2f:40:9a:78:e3:23:
         e9:ae:e5:b0:92:8e:2f:39:e6:90:49:b5:27:75:bd:ac:f9:45:
         85:55:bf:3c:a2:84:27:49:9a:24:fb:6a:bc:3a:e7:db:10:42:
         a5:3c:68:46:7f:2c:71:0d:c4:8e:e9:4d:16:61:44:e1:ae:b0:
         c6:ce:c3:16:83:c3:2e:1e:c7:a7:31:82:ff:c4:7f:60:b0:7d:
         6e:0a:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:33 2025 by rpki-client