Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f32e8d7e-f480-388d-9e55-21785b78d6b8.roa
File:                     f32e8d7e-f480-388d-9e55-21785b78d6b8.roa (raw, json)
Hash identifier:          NTI1CZgw3IvVfzklo0pUsU2uZcT6BS6/79Ak76/JVV8=
Subject key identifier:   8C:C1:FE:ED:1E:D8:B9:08:3E:00:1E:AB:57:31:3F:F4:83:9A:47:16
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584AB91BA9C628BCBFE7AABF5FC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f32e8d7e-f480-388d-9e55-21785b78d6b8.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     25899
IP address blocks:        216.110.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a9:c6:28:bc:bf:e7:aa:bf:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=eb4e0404-f199-4a74-995d-4d3ed4fe65ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:bc:5f:85:1e:c8:af:ad:24:4d:9e:72:c2:
                    7e:29:2b:ad:0e:47:b7:3d:f2:6d:5c:4a:69:e6:56:
                    26:9f:49:c7:f4:28:7f:12:57:e7:a1:92:57:3a:1c:
                    bc:42:b5:ae:ce:96:35:2c:ec:6d:26:e0:5d:25:c2:
                    f3:09:0c:3e:7c:9a:b2:6a:32:a8:d6:1d:f3:d7:32:
                    2f:c7:51:ee:e5:ac:e5:e7:b4:47:d8:0e:05:7c:d8:
                    9b:a3:5b:ac:98:04:fe:04:b9:79:e1:4d:60:64:bd:
                    aa:fd:06:15:d3:f6:e3:fa:fe:ff:3c:fc:37:8f:e9:
                    e6:66:60:8b:3e:ba:da:60:85:89:b1:3e:d6:e7:70:
                    78:3f:09:d2:d3:01:65:0e:52:0f:5f:75:46:ca:f1:
                    b2:64:d1:fe:16:96:31:d7:d5:d7:2d:cc:ba:07:91:
                    d2:06:49:66:34:e0:4a:09:2c:06:67:f7:28:72:9d:
                    bd:63:70:b2:ba:3d:11:60:87:23:74:ea:57:1c:82:
                    e4:d4:bd:20:3c:59:81:9e:ea:96:a9:d0:23:e6:f5:
                    89:ff:37:af:20:28:15:1a:7b:05:8e:4f:a5:bb:f0:
                    a4:05:73:d8:0a:35:4d:21:5b:5a:f3:66:7d:03:44:
                    96:25:75:1e:ba:43:3d:b8:9b:25:43:5d:a2:05:5d:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:FE:ED:1E:D8:B9:08:3E:00:1E:AB:57:31:3F:F4:83:9A:47:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f32e8d7e-f480-388d-9e55-21785b78d6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:64:b6:25:28:c2:da:84:bb:69:74:fc:d6:f9:26:25:b1:
         9a:1e:7d:f4:10:d8:f1:49:c0:80:08:20:e6:dd:02:14:cc:bf:
         d6:6e:b9:6c:11:55:dd:be:e5:72:80:a3:ff:da:e8:22:92:a7:
         6c:57:6b:49:11:b2:51:76:e9:9d:92:b6:28:03:26:15:57:17:
         de:5d:f3:c4:c8:8b:0c:e2:de:c5:4e:4a:48:be:28:51:be:29:
         84:c4:6b:95:31:33:07:db:de:20:f4:0e:eb:2e:f0:56:f2:07:
         f3:16:61:c7:80:1b:cf:de:f8:16:97:aa:df:5f:c9:15:40:29:
         ce:20:c5:01:0a:3f:f8:24:5b:64:06:28:92:3a:a7:3f:f0:7a:
         df:0b:fd:e0:74:80:d0:92:fe:f4:15:c1:47:a9:a3:9e:0f:f0:
         1e:3c:d8:3f:81:97:d1:9e:12:60:5e:6a:bc:87:59:40:b6:3c:
         ec:01:70:65:9c:aa:4a:e1:f5:d8:d8:78:04:2e:98:a0:66:49:
         38:a0:93:8d:77:29:f5:37:e2:49:71:0b:00:d3:d6:7c:66:1f:
         a8:f1:03:cb:a1:99:2f:d0:71:66:e2:4b:33:08:2a:2a:77:74:
         c2:35:46:1f:1b:97:f4:8a:e8:a7:d3:25:44:fa:e6:b9:9b:9c:
         a5:21:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:17:05 2025 by rpki-client