Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/35627ec4-1363-354e-ae4d-6559ea40b594.roa
File:                     35627ec4-1363-354e-ae4d-6559ea40b594.roa (raw, json)
Hash identifier:          aB8mfSfWAOHFka8u1suSgIgaIt5eRf9opzb5WhEnkhs=
Subject key identifier:   B3:A9:D2:CC:C5:C3:AA:80:19:01:DD:EB:93:F0:E0:4E:5E:E9:E3:48
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584BA932700339A5B687FA526340
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/35627ec4-1363-354e-ae4d-6559ea40b594.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     7265
IP address blocks:        216.47.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:70:03:39:a5:b6:87:fa:52:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=13e19219-f424-4921-8a8c-9c0b0b69ab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:56:fa:88:f6:e5:e6:07:13:ff:0f:42:2a:
                    69:38:ab:c4:9f:b1:76:10:1d:09:8c:e4:ca:86:ee:
                    8e:96:3a:56:f4:8f:83:48:6a:92:07:38:91:89:c4:
                    ce:3e:c0:87:7b:d1:45:d1:1b:98:91:ac:71:20:0a:
                    ca:fd:f4:85:0a:fd:ce:33:81:f1:20:49:60:78:a3:
                    59:71:9f:b8:1b:1c:ae:35:1b:48:b8:64:f6:41:8a:
                    de:1c:95:7d:ea:5c:c1:84:69:13:02:80:be:ba:80:
                    a9:27:1d:17:a4:65:10:d6:9d:2b:00:5b:0f:73:6e:
                    77:d4:e2:cf:3f:e5:fa:a0:72:4e:fa:14:d2:25:bd:
                    23:d3:07:f0:59:2a:51:41:5d:92:a9:78:ba:b6:da:
                    69:6f:2e:dc:7a:f6:a3:83:e2:82:18:df:24:10:58:
                    21:9d:35:db:e9:ee:31:c9:bb:ce:3b:08:0d:e0:50:
                    21:a8:f2:0e:a5:ff:31:91:ce:d2:2e:29:41:48:ba:
                    10:0c:68:93:08:7d:16:40:52:2a:86:1b:5a:5c:5c:
                    85:4f:9e:2d:1f:7d:63:53:ae:8e:77:69:c1:c2:fc:
                    e7:52:9b:73:ae:e5:b9:5d:28:c0:05:6a:9d:c5:6f:
                    4b:b9:2d:51:f0:2d:f2:33:cb:e5:f4:85:ef:65:81:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:D2:CC:C5:C3:AA:80:19:01:DD:EB:93:F0:E0:4E:5E:E9:E3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/35627ec4-1363-354e-ae4d-6559ea40b594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:a7:7d:e2:32:a9:bc:bc:66:07:81:c9:f1:77:9a:55:ff:
         5c:6e:09:a3:59:2a:b1:c3:08:df:fb:57:6c:42:4f:63:c0:bb:
         3c:e0:cd:29:09:9c:e9:9f:29:c7:c8:9f:27:bf:fc:8e:d3:3b:
         b2:86:5e:e5:9e:6d:21:ff:e6:7a:f0:e1:87:8e:7b:06:0a:13:
         ee:01:be:9f:0b:a5:66:69:f7:6c:0b:d6:3a:03:f1:a5:b8:2c:
         e7:1b:b8:55:9b:c2:22:80:3d:a3:8b:e7:78:5b:21:13:14:88:
         fc:b4:62:1c:65:6a:c0:c5:d6:bb:bd:29:12:89:fe:b4:6f:d0:
         f2:f1:2d:fb:79:c2:6c:65:1e:64:cc:08:38:69:c0:8c:94:32:
         00:59:d2:4a:71:c9:37:fa:8d:5b:6a:e0:ac:56:7e:70:62:0a:
         83:33:b7:1f:0a:0c:91:e9:be:c8:3d:a5:75:47:47:db:8c:43:
         d0:cc:cf:31:c3:79:1a:a8:7d:a3:be:35:e1:1c:f4:7f:d5:03:
         89:a5:cd:8a:c2:d0:9e:22:c6:b4:04:69:41:0d:97:ec:20:d2:
         c1:c0:ca:e5:f6:29:ef:14:f1:4d:7d:52:14:6a:ce:1e:c8:ca:
         7e:6b:0d:09:b3:d8:a7:9c:ce:48:5e:34:42:d3:9b:0d:9e:23:
         07:fe:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:29 2025 by rpki-client