Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa
File:                     bf102fe4-9e52-3302-9214-95617b2bce6f.roa (raw, json)
Hash identifier:          S2TnfCIIHqPkYHxnpo6WHOnZoKZtZRhKXAv6qIcaOyQ=
Subject key identifier:   79:3C:B5:B1:B0:0C:2A:38:9F:CD:BE:BD:48:B6:28:32:C9:07:F5:A7
Certificate issuer:       /CN=46d53077-7648-422a-806b-3635119b5b4c
Certificate serial:       010D0C9F4328584B821CD6F8376B5882C5BF6D40
Authority key identifier: 4B:75:3C:0A:A8:02:7A:F1:D2:7D:7A:62:7F:BD:57:EC:F3:5A:F9:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     46783
IP address blocks:        199.245.100.0/24 maxlen: 24
                          199.245.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/46d53077-7648-422a-806b-3635119b5b4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/46d53077-7648-422a-806b-3635119b5b4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d6:f8:37:6b:58:82:c5:bf:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d53077-7648-422a-806b-3635119b5b4c
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=beed8bf5-d1c6-4eb6-bb38-8188062332d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:24:f5:9d:15:94:ae:b9:71:aa:9e:7a:fc:
                    a1:9f:34:6b:37:86:41:c6:4f:ef:7a:d0:89:66:29:
                    96:74:34:3e:9c:1a:1b:a0:ca:14:ec:73:3c:90:2c:
                    5d:0b:7f:4f:f4:c6:86:ad:5c:b0:56:9c:f6:cc:f0:
                    94:a1:f3:71:76:7b:f0:38:a6:a0:f6:0b:c7:32:94:
                    62:20:b2:48:81:f7:2b:b8:0b:82:10:36:3c:ab:d4:
                    2d:61:9a:97:6f:5f:76:b3:f3:17:85:d6:b9:a6:e5:
                    82:2d:3a:25:1b:17:da:78:e8:e9:0b:e5:16:b6:7f:
                    a1:7c:71:5f:65:3f:88:48:d5:59:40:dd:b1:43:3e:
                    44:fb:8a:4a:a2:bc:8f:c3:c4:10:34:e7:d8:92:2d:
                    f3:13:46:d3:d6:a2:41:1e:5d:91:4e:6d:a5:87:41:
                    1b:77:11:8a:3e:d8:17:dc:9c:eb:dd:08:ba:ad:79:
                    e8:a7:03:45:db:ad:14:80:88:53:7f:84:2f:af:3b:
                    1c:a4:a1:e8:82:46:66:c7:1d:f7:68:19:ae:0d:c7:
                    93:ca:53:bb:e6:2a:a5:b8:3c:5c:5a:c9:29:df:f4:
                    0d:6d:f2:9f:ea:fe:c4:f1:4b:b6:df:3e:6f:0d:e0:
                    bf:a2:53:9a:f8:d7:5c:c0:84:e5:f2:a8:ce:b8:96:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3C:B5:B1:B0:0C:2A:38:9F:CD:BE:BD:48:B6:28:32:C9:07:F5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/46d53077-7648-422a-806b-3635119b5b4c.crl

            X509v3 Authority Key Identifier:
                keyid:4B:75:3C:0A:A8:02:7A:F1:D2:7D:7A:62:7F:BD:57:EC:F3:5A:F9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:2b:da:f1:cb:8b:72:0f:6e:7a:8b:b7:fd:95:66:7c:b2:
         0e:a6:7f:4f:ac:1a:90:ff:1d:56:fb:4a:28:17:f2:3c:c1:0f:
         e6:5b:2a:1d:f3:de:b8:c3:85:0e:39:c8:f2:0c:18:65:72:16:
         56:6e:64:21:8e:a7:a1:19:c7:da:85:53:9a:be:93:61:ad:d6:
         8e:4b:f1:b0:23:bd:21:72:53:84:e7:21:44:94:cf:a7:25:10:
         16:df:2c:f0:f6:ad:84:03:9c:50:82:3c:b2:f3:53:d4:44:c5:
         b4:30:8b:c8:15:da:9e:f9:3b:f5:48:03:ef:f4:9a:e9:0f:97:
         44:7a:6b:bf:a1:b2:90:20:bb:34:5a:2e:09:2a:77:79:0b:7c:
         41:e4:fc:a1:c3:4f:7d:e0:27:51:9f:e0:45:d6:c1:31:ed:8e:
         ea:76:e2:56:ad:8c:48:0f:28:e9:3c:4a:6d:c3:f8:f1:08:d4:
         f5:0a:85:c5:cf:3d:72:ec:ce:10:3e:bd:4c:df:ed:97:c3:d7:
         a7:3e:f6:5b:af:d6:57:c1:f6:6e:ef:31:bb:cd:d2:a6:91:8e:
         88:5f:12:87:6d:3b:aa:57:74:2a:a9:38:93:b1:73:ba:08:73:
         44:ac:6d:7a:fb:91:50:a7:46:06:4e:fc:82:7c:d5:ff:49:9d:
         2e:26:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:31 2025 by rpki-client