Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa
File:                     f3ebe319-be5f-3778-a975-9213caf64420.roa (raw, json)
Hash identifier:          dC8wQ6t/KzzVYpmepqngjICJcr0/zjfUrYVxfdijM9Y=
Subject key identifier:   AE:65:A2:74:92:92:8D:3C:52:F5:77:FC:7C:6A:D3:CF:EC:84:41:C6
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584B33F19E9241AC35B8022DBE40
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     10930
IP address blocks:        209.251.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9e:92:41:ac:35:b8:02:2d:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=79b13f66-4003-4884-ace5-5b27fb69cd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:46:e2:ef:27:64:27:c9:fc:4e:69:fc:22:
                    f1:d4:90:33:a0:c9:64:f0:0e:6c:9f:45:d9:9e:38:
                    18:f6:74:47:25:36:49:71:3b:b1:e4:9f:c4:98:90:
                    bb:c7:98:6e:3e:6f:79:a5:93:5c:e1:59:6b:cb:a9:
                    da:fc:fd:03:4c:cd:77:ca:01:00:1e:23:3d:da:d1:
                    69:51:96:83:6e:0d:18:5a:e6:d3:fa:62:a1:b0:19:
                    9b:ce:9c:d8:63:8a:8b:7e:e5:07:f3:8d:02:21:1a:
                    0d:7c:6e:7a:12:a8:15:42:65:7d:4e:4f:ab:94:8f:
                    c7:2b:d0:09:86:b3:a5:61:b6:b0:75:76:d6:57:2a:
                    b8:c8:48:bd:67:7d:41:08:99:85:9a:91:ab:9a:50:
                    b7:19:f6:26:0d:bd:e4:8a:1f:26:42:f5:40:96:c4:
                    90:c7:ae:4e:bf:1f:41:27:94:e9:fa:b5:80:5b:35:
                    20:e6:eb:93:09:d9:98:12:e5:51:22:75:cb:4c:a2:
                    e1:ca:de:d1:d7:d2:d4:b5:4f:cd:52:b7:ee:26:90:
                    e0:a7:6e:3f:40:8f:89:d9:ef:ab:c2:48:9f:f6:70:
                    f3:2f:91:c0:86:3d:5f:91:bd:02:c3:99:3a:6b:c0:
                    4a:70:61:47:06:d9:33:52:f0:9c:3d:a3:93:a2:09:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:A2:74:92:92:8D:3C:52:F5:77:FC:7C:6A:D3:CF:EC:84:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/f3ebe319-be5f-3778-a975-9213caf64420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:17:f8:61:e7:33:2b:ef:0b:43:ac:24:36:f1:88:77:64:
         2c:b6:c9:f5:89:3d:f7:c3:d1:e2:ae:67:39:be:8d:3d:4b:a9:
         79:92:bb:60:b0:d2:bc:f6:19:f8:05:54:5f:6e:51:a6:20:79:
         49:64:71:c7:e9:30:7b:f0:08:40:c5:ec:5f:ba:b1:e6:7b:e1:
         61:3d:da:ba:43:1d:0a:ca:f1:32:95:c4:b1:ef:86:5a:c3:59:
         4d:f1:9e:7f:d3:35:84:34:ac:27:70:b9:f8:2c:18:c2:54:80:
         f2:0f:23:fd:f5:f2:42:21:75:59:31:4e:8f:4b:ae:d3:25:88:
         98:fd:48:bb:cd:3a:70:ae:d7:b5:7d:50:a0:8b:8c:6b:00:a5:
         0c:5c:16:8c:2d:3b:b9:19:fb:64:99:c2:34:98:92:d3:8d:ad:
         bf:3b:fc:cb:a3:b2:e8:be:8c:a4:95:09:e5:d6:16:0b:a7:90:
         d1:2c:f9:69:f4:e8:5f:c0:45:bb:2e:09:8d:c2:7c:14:d9:88:
         6d:4d:0c:11:b2:67:7d:7c:6d:e3:2a:f8:59:7d:d9:00:7e:8a:
         f0:8b:0e:e5:0a:86:ec:9f:af:42:d5:a7:d7:9b:dc:c2:44:d4:
         fe:95:c4:f1:d2:a6:e6:bf:93:14:51:df:c8:ca:cd:86:d4:32:
         5a:e5:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:07 2025 by rpki-client