Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa
File:                     d097d779-d0f5-3dfb-b429-f39981788e91.roa (raw, json)
Hash identifier:          CuEgq+tKVdX3kjDisaNB4Ast3JG8FUprCkpm8lXc7nY=
Subject key identifier:   A0:9C:95:BD:2D:28:3D:30:BB:0C:3E:D7:D0:32:65:D1:D5:58:58:38
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584AA42B79F74B9C00881CDBD140
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        170.176.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:79:f7:4b:9c:00:88:1c:db:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ea571915-5ac4-45ec-bcf3-d540c646c6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:d5:bb:4a:4c:29:b4:94:66:f5:b2:16:39:
                    83:49:ae:f9:cc:2c:24:2c:d1:b7:70:96:9e:e5:81:
                    19:de:cf:75:60:d8:0b:f8:d1:f1:84:7b:5e:a9:08:
                    cc:9b:6b:ea:8c:6a:f1:5d:22:81:65:1c:62:b7:4d:
                    0f:2e:dc:50:4b:6e:6b:ce:23:6f:cc:d9:d7:fe:03:
                    d3:73:94:50:12:a1:31:fa:16:6a:bf:11:b0:99:d4:
                    2c:1b:89:d1:85:2f:59:96:46:2e:4e:fd:81:38:73:
                    95:dc:c5:bb:d9:81:70:fd:8c:da:97:94:da:ff:c9:
                    db:1d:64:3d:f0:fe:25:95:95:f3:05:be:17:c7:95:
                    c9:ae:c4:4a:74:90:59:8f:58:5c:24:3a:54:4b:b9:
                    6d:c0:95:df:f8:be:0c:ee:78:9f:d6:1e:94:a3:cd:
                    41:0f:6e:45:0f:8e:79:83:1e:c5:f2:16:a6:5a:d3:
                    d1:05:aa:79:d1:3f:ad:82:40:7a:1a:51:21:52:af:
                    7e:b9:84:2d:7e:94:cf:17:6e:01:25:b6:d0:1b:32:
                    9a:c4:ec:02:54:e8:95:fe:88:ce:ea:d1:f5:b1:97:
                    d1:cf:8b:6d:1e:e1:0e:e1:2b:61:b2:a0:cc:04:9d:
                    ad:2c:68:55:82:69:3f:d1:1a:93:0d:d9:0d:3e:69:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:95:BD:2D:28:3D:30:BB:0C:3E:D7:D0:32:65:D1:D5:58:58:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:97:e4:27:ef:40:0d:5b:53:1f:92:18:b4:26:d6:47:74:
         c5:02:41:ce:fc:41:70:0b:c3:1a:ac:a9:48:d7:80:76:e9:f3:
         4e:cf:d0:2d:5f:22:31:c9:b5:83:51:af:d7:9a:42:d9:f6:c9:
         90:c2:ab:fe:ce:f0:09:88:c9:46:bc:7a:36:e5:c7:c5:e6:22:
         2c:86:b2:02:98:cb:a6:f9:2f:ab:1c:c3:ed:de:16:43:79:4b:
         8f:77:1b:04:87:5f:e4:b2:16:fe:3e:f8:c2:d7:fb:85:63:48:
         2b:92:e5:5e:b5:11:f7:68:f4:55:eb:90:5d:17:e9:12:24:48:
         90:5a:52:eb:b0:b4:43:70:c3:87:46:5a:92:34:12:47:80:f2:
         eb:6a:fb:a1:77:36:8d:ed:29:fc:ad:4b:c0:8b:da:1e:e3:a7:
         a4:4c:c6:c6:6f:c2:65:b9:0e:93:ed:bc:e3:1f:0b:83:5e:38:
         69:80:38:40:28:84:af:9c:1e:8f:a1:cf:f8:ff:59:03:41:c0:
         32:a6:07:f5:0c:ea:62:df:2b:ae:ba:a0:e9:e5:b3:b2:d2:9d:
         47:0d:b7:b5:65:62:f6:21:b5:2d:89:7a:d6:25:47:34:7f:be:
         a6:cf:80:f7:3e:67:9f:00:17:7d:3b:db:dc:8a:8b:b0:c5:bb:
         ac:cb:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:26 2025 by rpki-client