Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
File:                     2681e094-c5f0-376d-abe2-47d9d9497306.roa (raw, json)
Hash identifier:          XPOuns/aJo42P1vjJ3tLA04WpeRuQZ/rbMekWmVCaZU=
Subject key identifier:   2B:7C:7B:93:38:F6:65:E1:5A:66:D8:F3:24:AE:19:A3:15:F1:0B:7E
Certificate issuer:       /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial:       010D0C9F4328584BBFA5A421205F8ECAF3BEE200
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     36466
IP address blocks:        199.180.216.0/22 maxlen: 22
                          208.71.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a4:21:20:5f:8e:ca:f3:be:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=818d631d-1ff7-4acd-a54d-a39e9e41c0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:54:27:1d:08:1a:d9:d2:44:b3:f7:c8:af:
                    74:08:e6:2a:75:8f:41:d5:4c:be:aa:69:63:71:61:
                    9f:a6:77:79:af:a7:41:00:51:8b:2e:78:1b:d1:a2:
                    80:03:e4:2e:6d:dd:2c:08:0a:d2:da:1e:aa:00:41:
                    99:e1:90:3c:e9:a5:84:0a:94:5e:16:5b:cc:11:44:
                    8e:0e:d0:ca:04:eb:d4:04:df:6a:2c:b5:c2:22:90:
                    a0:89:a5:f6:4c:89:d0:22:e7:58:be:7c:47:8d:32:
                    01:ce:d9:2e:ff:29:56:22:fb:34:b1:02:8f:3f:b5:
                    3f:50:57:af:e4:e6:68:61:eb:52:e4:ab:1a:1a:50:
                    0a:60:51:ae:61:47:3a:68:ce:7a:ca:a3:84:65:54:
                    74:eb:9a:66:93:68:18:3e:90:b2:60:18:37:71:0c:
                    69:40:23:af:d9:95:68:e5:f5:84:dc:e7:ee:7e:a0:
                    c6:e1:b2:01:78:0e:30:63:46:b8:d9:9f:8f:86:da:
                    ff:19:f5:fe:5f:3b:32:d1:8f:eb:d8:9f:fa:41:7b:
                    70:26:c7:71:69:11:77:0c:3f:e6:aa:01:f8:c0:77:
                    ea:1f:52:fc:ae:ab:08:e1:ec:c9:0e:f5:ba:d3:b4:
                    1e:e5:37:2c:2b:ed:dc:55:65:a5:6d:96:be:a3:7b:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7C:7B:93:38:F6:65:E1:5A:66:D8:F3:24:AE:19:A3:15:F1:0B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl

            X509v3 Authority Key Identifier:
                keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.216.0/22
                  208.71.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:36:38:71:0d:26:16:81:da:d4:a5:7d:fc:f9:ef:69:48:
         45:7f:d6:1a:a2:14:2f:77:d8:ef:d6:27:dd:1d:52:89:1f:88:
         0b:0f:3f:02:01:0f:60:1d:3e:68:c0:67:c9:78:33:d9:51:18:
         43:ba:3e:fc:1e:69:fc:4d:86:76:40:5e:df:1c:35:51:62:da:
         4e:c4:b9:fc:c3:bd:74:99:8d:99:e4:9a:bf:d8:af:d0:d3:5d:
         07:e8:09:55:60:e6:d8:da:b5:1c:42:12:18:f7:85:a9:d9:62:
         a4:3d:c4:df:64:57:cb:6b:b8:06:69:45:93:70:12:4a:6f:73:
         0f:50:f3:68:95:ec:c8:83:20:b9:14:df:48:a4:a6:9f:ed:d8:
         b0:5e:df:f2:a6:fc:2b:60:50:ad:4a:6e:e7:21:67:97:12:8c:
         a1:b8:70:56:f7:18:2f:75:d3:79:00:30:83:cf:d9:35:e2:54:
         6b:aa:da:36:f5:b5:9e:e5:84:53:e3:c8:6f:db:ef:dd:14:e0:
         ef:4f:1e:d1:07:9c:81:d2:ac:9d:57:b1:45:97:6d:f0:8c:48:
         60:0f:cb:cf:fd:12:4e:2c:4f:c9:61:82:40:6c:3b:68:45:9f:
         1a:f8:bf:f1:ac:19:44:ec:20:00:f6:3e:77:df:e3:7c:f1:1c:
         5a:3f:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:11:57 2025 by rpki-client