Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
File:                     a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json)
Hash identifier:          NagURLTg4pv4h+amqf9BDgNJCgBVcqdpysO6JKq837U=
Subject key identifier:   5C:04:F5:2F:41:64:E9:BA:60:C5:15:9D:0E:DA:F5:AE:EB:13:9A:C2
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F4328584BAA9799A620F346CD3D716B60
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        216.147.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:99:a6:20:f3:46:cd:3d:71:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=e3379ee8-44b9-4425-a111-1bc14eb8725a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:1a:24:63:da:d3:85:c6:26:f7:aa:3f:5d:
                    8a:1f:14:57:75:7c:75:a2:f9:01:17:28:de:7d:e3:
                    82:7b:07:53:ea:13:f8:f6:20:0b:e5:64:3d:a1:0b:
                    5e:1e:aa:5f:be:a4:8a:52:b7:0d:44:31:88:3a:b4:
                    df:3d:1e:20:33:b0:51:d8:80:0d:37:29:9c:5e:f8:
                    fa:53:f0:6f:a9:a3:d0:b5:38:17:17:02:9d:26:9d:
                    56:a0:da:de:62:78:7c:e2:9f:8f:9d:a0:fc:9b:1d:
                    c3:a9:01:b1:18:08:45:7c:97:12:bf:fb:9d:88:d4:
                    1c:3e:10:e8:45:56:c4:04:f7:ff:c8:d2:0e:76:c2:
                    f0:0a:bc:49:99:b5:52:c1:cf:42:68:2a:26:7a:5f:
                    27:d4:06:c9:33:d7:a3:50:0a:54:9f:a9:52:8f:0d:
                    b9:bc:dd:03:09:7e:f8:f3:d5:a9:10:62:bf:da:1c:
                    96:8d:3e:4d:80:37:71:8a:b4:aa:ec:32:63:c9:c6:
                    75:88:80:d6:ac:55:ed:69:02:0d:93:e3:5c:61:51:
                    51:40:e4:4d:76:26:67:78:6b:d0:78:7e:f8:86:74:
                    48:3b:8e:b2:c9:43:85:57:56:82:9f:62:3f:fd:e9:
                    07:69:f6:88:74:52:01:ee:19:5d:dd:e8:36:14:f3:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:F5:2F:41:64:E9:BA:60:C5:15:9D:0E:DA:F5:AE:EB:13:9A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:02:4a:1c:2b:bf:cd:e8:8a:c0:d6:39:c0:13:9a:d8:b7:
         84:62:5b:a9:11:37:68:3f:7d:30:27:26:cf:e7:c5:ac:a5:ee:
         50:1f:5f:9e:1b:61:31:62:7b:f6:f9:dc:03:fa:d9:21:11:06:
         fe:23:b4:10:97:4f:48:3b:a5:c7:8a:91:68:a9:3b:4e:32:1e:
         0d:9b:0e:77:1a:f2:e3:b9:04:5b:f4:66:d1:f1:0e:04:95:5c:
         1a:0f:67:a4:2f:d1:3f:f0:e5:1d:3f:53:5b:f6:8f:ca:15:7b:
         72:34:0c:72:99:bf:42:40:27:da:12:e6:f6:e2:1f:c1:7f:66:
         d3:ad:2b:7e:0e:b8:54:05:2f:6f:30:73:34:f8:ef:87:05:c0:
         a1:9c:78:cb:e2:eb:06:d2:89:a5:30:8f:d2:3e:7c:6d:be:69:
         f9:fc:95:f8:83:93:20:dc:2a:19:19:20:62:a4:1c:10:74:fb:
         60:dc:0a:93:4a:83:7e:7d:f7:83:4d:fe:57:56:b7:d4:b3:a2:
         10:f0:86:13:0c:32:a6:a2:50:b9:f4:b3:54:9c:b7:8a:3d:a4:
         f4:46:cc:de:f1:6c:21:e6:ef:87:97:79:c5:5d:29:3a:f5:e3:
         5f:04:e1:86:fb:19:28:27:84:bf:21:91:b8:53:07:bc:8b:01:
         ed:d6:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:14 2025 by rpki-client