Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757ad8ff-1f70-39d6-8de6-74adb4dca6b5.roa
File:                     757ad8ff-1f70-39d6-8de6-74adb4dca6b5.roa (raw, json)
Hash identifier:          XsCMo+FZNC66e0g2JR/qJiz3GiRFNxtl8iz8mCpGqeM=
Subject key identifier:   07:DD:10:21:3D:A7:04:12:C3:B2:0E:CB:4D:87:91:76:A8:63:4A:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B76F25E3EA6A16447C4EC6600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757ad8ff-1f70-39d6-8de6-74adb4dca6b5.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     7342
IP address blocks:        209.131.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5e:3e:a6:a1:64:47:c4:ec:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=592ec06a-5ac9-4b6c-8b87-88241d518cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:06:11:dc:d9:80:78:dc:7f:72:f4:3e:b0:
                    bd:e0:29:02:43:5b:12:1e:44:4d:96:fb:87:e5:bb:
                    2d:e0:3e:7b:3d:02:30:e0:57:d8:9a:c0:1d:14:ef:
                    f5:1a:b6:e0:b4:54:38:04:af:e2:9c:25:45:c2:c5:
                    3c:fa:4a:34:49:04:fe:d2:aa:63:46:9b:10:8d:d0:
                    f1:ec:cc:d0:32:62:cf:88:cb:e6:30:52:5f:0c:54:
                    09:64:1a:62:82:16:b3:59:48:d6:2b:94:ae:17:9a:
                    e5:fb:9f:09:b2:bd:71:c0:c4:4c:d4:d0:e9:e0:c0:
                    35:1a:c4:b3:7f:88:56:21:6c:74:77:0e:b9:29:5d:
                    ad:65:25:4e:db:9f:2d:a3:43:32:bd:0b:e8:91:83:
                    27:11:11:6c:ce:01:3a:55:a5:b1:59:87:3c:f6:3d:
                    30:38:72:ae:57:a0:ad:14:21:f0:b4:b9:46:70:ed:
                    2b:bd:80:01:ee:68:55:6b:fe:18:ac:c6:38:7b:a1:
                    16:44:54:ae:27:3a:f8:c3:ca:9e:04:86:1d:58:d4:
                    0e:9c:d6:1f:c6:4b:28:2c:42:fb:18:ba:e4:a7:3f:
                    ed:17:2f:b1:96:13:9d:6c:c3:33:4b:aa:e9:e7:76:
                    28:d8:0d:87:e7:69:dc:c6:e3:49:ff:b3:3c:dc:30:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:10:21:3D:A7:04:12:C3:B2:0E:CB:4D:87:91:76:A8:63:4A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/757ad8ff-1f70-39d6-8de6-74adb4dca6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:aa:0e:c0:43:ed:24:13:eb:a4:15:d5:31:b7:73:2a:e2:
         a5:2f:3d:fc:af:f6:f0:fe:82:ff:6f:17:91:a0:f4:ca:82:36:
         9e:fb:25:b5:d8:cb:43:26:d5:c6:f3:c8:b4:fa:58:e6:c4:30:
         3b:56:8e:e9:82:01:e9:61:87:a5:cf:d7:42:75:6f:ca:de:a6:
         91:83:45:0b:48:ec:9b:77:b9:76:64:cc:0d:80:76:41:63:9f:
         1a:9b:64:41:1e:b2:63:79:85:74:f3:07:f5:32:4d:8a:d0:94:
         38:30:8b:2c:a0:ff:16:61:db:2a:44:27:95:fb:c2:d3:5a:e4:
         81:6f:dc:b3:b8:9f:3c:eb:3d:f0:53:86:bb:6a:9d:b3:e8:07:
         62:5d:e7:a7:d3:9e:fd:05:8c:90:77:fa:f5:f1:fa:3d:dc:e6:
         74:31:59:24:ce:fb:dd:c8:08:bb:d4:40:c6:20:2e:35:02:71:
         d9:b1:64:95:04:5a:2e:d0:a9:cc:83:2d:03:e6:75:7e:ed:bd:
         13:e0:b0:fd:9e:0b:7a:64:e0:5f:ac:eb:27:b7:9b:e6:40:7a:
         7b:db:f9:92:40:1d:8c:97:16:a9:85:4c:f4:3d:ea:eb:2e:06:
         af:13:8c:86:d4:07:0e:01:92:c5:92:a3:ad:bb:3f:39:ca:92:
         64:10:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:00 2025 by rpki-client