Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/27e121ee-63c1-3669-99f4-bfe27250bfb7.roa
File:                     27e121ee-63c1-3669-99f4-bfe27250bfb7.roa (raw, json)
Hash identifier:          /f4aCNDnmZSmNLSgQyP6diQ1HXHwpV+IGo6cC3IA9W0=
Subject key identifier:   08:35:91:97:30:6D:C8:B6:36:D3:AE:01:48:54:DF:15:C7:63:89:47
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584B89177F4D4788370693BCFF80
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/27e121ee-63c1-3669-99f4-bfe27250bfb7.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     62651
IP address blocks:        205.185.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7f:4d:47:88:37:06:93:bc:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=5ec40286-2842-40bd-b996-042ba3c92f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:85:dd:f1:94:1e:a4:e4:24:8e:2c:89:22:
                    e1:1b:79:ba:81:bd:a5:08:02:c6:54:bf:06:00:41:
                    57:f1:97:74:8e:38:1b:95:ce:58:db:bf:70:cb:12:
                    db:82:99:b9:4c:d6:d5:dc:e9:be:5e:97:ee:31:57:
                    41:1e:a1:ac:66:0d:da:08:be:69:cf:16:85:26:01:
                    72:d8:b2:6f:33:09:97:66:b1:9c:a5:5b:e1:0f:fc:
                    86:66:fe:d8:f1:86:45:0f:72:5a:b3:63:5d:76:a1:
                    cf:7e:7f:21:60:b9:4a:1e:af:8a:64:2e:12:4e:5f:
                    eb:db:5e:e1:8c:d3:01:2e:5d:12:54:21:89:88:f9:
                    ea:44:0f:b8:29:18:bb:85:a5:99:45:1c:59:c0:73:
                    c8:02:bd:05:b8:35:76:ab:dc:4c:39:94:2d:c4:54:
                    45:5c:87:72:0a:8a:38:ee:02:a2:d9:c9:9c:ab:05:
                    dd:10:e3:4d:88:66:a5:3a:82:b3:d0:e6:b3:a9:4c:
                    cc:80:cb:5e:4f:c5:24:dc:25:70:93:6a:aa:f6:29:
                    26:da:42:55:22:83:b9:8b:5b:3a:f1:1d:10:e4:45:
                    48:c2:b6:57:bb:f5:87:e3:85:44:33:c6:0d:93:3f:
                    48:84:fb:38:92:79:3b:98:58:fb:c0:3c:b8:b6:0b:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:91:97:30:6D:C8:B6:36:D3:AE:01:48:54:DF:15:C7:63:89:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/27e121ee-63c1-3669-99f4-bfe27250bfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:86:92:2d:85:d0:72:3a:14:61:c1:8d:2f:18:82:ed:90:2d:
         92:c4:84:b1:76:5b:a9:ed:ef:f2:10:ef:9b:32:dc:0b:61:bf:
         13:88:9f:46:7e:72:b1:73:e1:bf:c5:3f:ae:97:d9:09:1c:73:
         65:8a:de:18:4d:38:83:ad:6c:c4:01:33:19:0d:1c:55:c6:1c:
         c3:57:98:c7:60:8b:ea:95:6a:d8:46:96:6c:fd:9b:92:02:df:
         42:5f:a6:18:30:46:b9:c7:e2:87:ca:9d:3b:5f:3a:d1:0c:84:
         5c:ce:3e:d6:42:32:f2:0c:e8:73:27:69:a0:4e:b2:fc:59:f2:
         57:1b:66:b7:c0:2b:e9:04:2a:de:8b:25:c0:4b:ed:36:7f:16:
         39:08:46:eb:56:75:e5:92:1a:3c:0e:03:e1:4f:34:df:3b:22:
         dd:45:f9:6f:8e:40:5e:0d:59:23:20:1e:8d:72:47:b3:8b:f4:
         e9:69:89:bd:72:e4:ac:e5:c6:ae:70:71:84:1f:44:5d:a5:ed:
         7e:7a:9a:10:14:4f:1a:27:b4:2b:94:ac:ff:42:61:a0:9e:dc:
         91:5d:c8:38:8a:12:69:af:4b:bd:47:f2:00:21:3f:d7:3f:2e:
         a1:53:01:7b:b3:83:0e:74:86:f1:ab:af:49:d1:91:c9:7c:75:
         5f:f6:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:37 2025 by rpki-client