Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
File:                     0df970dd-1000-33b2-94cf-be4c8681560d.roa (raw, json)
Hash identifier:          eWhTdCUZULTQbPYp9X1Zhea5pZhElgmACAZnZBuPwoc=
Subject key identifier:   47:97:7D:ED:D0:1D:EF:B3:71:6F:1A:0E:03:06:B9:6A:F0:9D:58:1E
Certificate issuer:       /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Certificate serial:       010D0C9F4328584B110C01FB4D816380DA697860
Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     54013
IP address blocks:        198.231.26.0/24 maxlen: 24
                          198.231.27.0/24 maxlen: 24
                          204.75.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:01:fb:4d:81:63:80:da:69:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=0e0abc5b-64b7-4ecc-a648-c8eed92d7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:bf:c5:39:14:e1:1b:d8:01:e5:31:c6:7f:
                    a4:b1:a3:99:d9:b8:0d:d4:ed:97:45:1f:7a:d3:f2:
                    e1:17:e0:55:6f:33:ca:00:41:5b:6d:0a:bb:78:11:
                    81:c5:74:b1:2e:aa:6f:5c:93:ea:c8:79:30:d8:48:
                    ff:02:af:12:15:79:ed:99:d0:d8:23:f2:08:5f:3c:
                    56:c8:8f:53:b8:2c:fd:03:ef:cb:b6:b6:3c:6a:6d:
                    dd:6b:f1:03:3f:2b:34:7e:b5:dd:41:2e:e7:ef:87:
                    ab:6c:68:4e:19:71:69:8b:01:25:40:f6:7c:e0:60:
                    0f:51:35:96:b5:1e:60:33:2d:16:b1:89:73:a7:2c:
                    24:4c:af:68:ac:13:61:48:e1:b8:d2:36:7d:cf:be:
                    ae:24:e1:78:67:b2:4d:56:0d:11:13:b6:ef:9d:40:
                    f0:5f:86:39:26:79:d1:73:1d:63:4d:f2:b9:86:8b:
                    08:69:9a:95:06:d0:ac:6b:74:3e:34:d3:c9:57:63:
                    05:49:ff:b3:3b:c4:4b:82:b5:1b:38:79:f5:5b:67:
                    05:a6:08:31:9d:9e:a8:8d:a5:a7:27:49:df:9a:8d:
                    30:1e:59:19:51:4c:61:5c:43:b1:94:1e:a3:b7:aa:
                    1c:d2:d3:26:c2:39:ea:72:b9:79:06:1d:aa:40:47:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:97:7D:ED:D0:1D:EF:B3:71:6F:1A:0E:03:06:B9:6A:F0:9D:58:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl

            X509v3 Authority Key Identifier:
                keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.231.26.0/23
                  204.75.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:d8:42:94:28:8e:cc:e8:c5:c5:63:2f:37:7b:94:02:6f:
         54:92:a8:db:3d:5a:bb:6e:ae:74:2d:e8:3f:c5:98:d5:d6:14:
         3c:b4:26:98:6f:6b:ab:91:ef:27:6c:22:1d:7c:79:d5:ba:a0:
         dd:c8:72:18:ea:d9:dc:f6:09:0f:e9:fb:61:fe:a9:2c:32:b6:
         aa:95:fd:74:65:31:ae:cc:55:15:3e:6b:ba:a2:13:c6:62:23:
         87:16:eb:23:31:f7:a7:84:f7:2d:a8:88:01:74:cf:b3:91:b9:
         fd:14:4b:11:53:3c:3b:4f:0d:a1:e2:1f:99:2e:cd:c6:5a:37:
         5a:3c:6d:88:85:b1:2f:74:b3:b6:b3:63:26:2c:49:55:be:5b:
         40:e4:16:2e:33:58:cf:8f:4d:f3:f4:50:91:98:76:fe:85:0c:
         25:3f:5b:1a:9b:d2:3b:c1:ac:98:08:cb:5a:72:73:63:d3:e7:
         ba:b8:21:98:07:24:e3:aa:ba:33:ae:7b:cb:ce:4b:ca:fa:c9:
         b0:cc:be:38:2b:af:d6:10:28:37:3f:d7:45:d9:d8:7d:c8:bf:
         be:50:88:ba:1c:63:f1:40:18:e6:5a:cb:83:b8:e5:dc:4c:bb:
         6a:61:45:90:bf:f6:32:6f:f1:34:da:85:63:06:d6:b2:59:15:
         64:8e:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:35:07 2025 by rpki-client