Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
File:                     7b012c24-2f2b-3db0-b745-b22b856c2688.roa (raw, json)
Hash identifier:          q/xV4T97/ELXdyAWvaKI0fK4/PVqxI891WxEBg99Q/E=
Subject key identifier:   E4:F0:37:2C:69:14:63:80:E8:DF:7D:99:62:6D:D6:A4:27:1A:81:BE
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584B5B07457B730C38462EECA3C0
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        168.203.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:45:7b:73:0c:38:46:2e:ec:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=54a22484-cf8d-4f8c-ab90-12dd5ac73cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:8c:7e:60:bd:9b:3b:6f:a6:c4:fe:49:77:
                    08:a2:6c:4c:9f:80:a3:5c:c7:c7:2e:71:3e:d9:d0:
                    d6:f1:3a:24:f0:cb:fb:5e:88:5d:b7:b3:e3:bb:28:
                    b8:aa:04:cf:cb:ed:25:1b:80:1f:ba:5c:cf:59:e0:
                    7c:8b:a6:c3:85:9f:73:37:4f:d6:1b:83:e2:41:7f:
                    d7:e0:29:e6:89:9c:64:e4:31:63:0f:8c:78:fb:d3:
                    58:ef:39:9f:43:aa:e8:bb:2a:ac:9e:54:e6:5b:99:
                    76:fa:2e:63:cc:60:02:46:bc:39:53:fd:4e:be:82:
                    de:c4:06:96:ac:11:43:dd:80:27:f1:93:8c:76:f8:
                    bb:b9:7c:e7:77:8b:8b:9e:83:a0:ee:6f:e1:3a:f5:
                    71:ff:f7:62:56:cc:0d:4b:80:ce:74:e2:88:2d:d8:
                    97:77:13:0c:ef:ad:67:c3:33:e5:6d:36:90:97:92:
                    a9:48:cd:51:7d:33:bf:aa:07:b2:e3:f1:87:81:13:
                    6c:57:00:6d:b6:79:bf:47:eb:4c:a8:bc:13:31:81:
                    30:be:5d:54:f9:b1:7b:5e:11:a5:31:ba:ae:6a:59:
                    dc:cd:9c:16:92:51:b7:24:b9:fa:db:3f:bc:72:c3:
                    e5:72:f4:dd:d1:b7:c4:a6:c4:37:37:74:36:54:dc:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:37:2C:69:14:63:80:E8:DF:7D:99:62:6D:D6:A4:27:1A:81:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:16:7e:a6:d3:be:53:58:ab:09:63:dc:18:8a:fa:07:3d:
         42:3b:3c:c1:cd:8c:23:37:17:86:1d:58:e1:eb:00:fb:13:79:
         cd:fe:7b:60:a3:af:97:d2:7a:7e:66:a9:c8:05:4f:01:ea:f9:
         31:b5:74:5d:e1:bd:0b:60:17:77:ab:54:6a:0c:7b:e9:97:e8:
         d6:90:5a:be:a0:7c:43:97:ab:2c:a3:47:4d:cf:cd:94:78:89:
         c4:45:e9:9b:be:b0:3c:a7:91:9b:69:1b:7a:0d:eb:ce:d7:7f:
         c0:34:b0:eb:8e:66:23:67:e4:e2:fc:5f:25:82:7b:f3:01:07:
         87:08:5b:59:01:24:d7:9c:af:64:1a:fd:a9:c4:5f:af:08:12:
         8a:e9:82:d6:8a:2f:f5:e3:7e:de:ec:05:b8:49:0d:96:3b:53:
         ed:2c:65:c5:80:8b:50:fe:9e:82:54:de:44:1c:e4:9b:00:e9:
         6d:09:41:41:7f:40:9c:92:80:7f:32:3a:a8:3d:cb:c5:f0:31:
         45:fe:04:bc:1a:0b:9a:2d:b9:0f:7d:52:14:1a:cc:38:99:a8:
         df:06:45:7b:13:5b:9f:b0:f6:94:53:f6:17:ff:3f:63:e8:2b:
         a5:c0:d7:ed:8a:25:e2:c9:cc:dd:f4:80:32:66:fb:59:b2:93:
         fd:2f:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:25 2025 by rpki-client