Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/329c0983-6ec7-36ad-82d7-96fd35e29e4b.roa
File:                     329c0983-6ec7-36ad-82d7-96fd35e29e4b.roa (raw, json)
Hash identifier:          /T5YBTK+kx3v6wURYkEXKBoWwHjx3dluNMobth8nID4=
Subject key identifier:   40:B7:01:5E:93:DD:CF:03:7A:66:98:3A:3F:72:5D:2E:A9:D5:3C:08
Certificate issuer:       /CN=e351cae3-e8b7-49f3-8533-235870399685
Certificate serial:       010D0C9F4328584B7DECA8D678C7CF4DA9BAEA40
Authority key identifier: AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/329c0983-6ec7-36ad-82d7-96fd35e29e4b.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     22673
IP address blocks:        198.252.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a8:d6:78:c7:cf:4d:a9:ba:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e351cae3-e8b7-49f3-8533-235870399685
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=d0a153c0-5963-45e4-b264-44216d16bf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:99:b7:82:8a:4f:ae:55:cd:c8:8e:fb:99:
                    72:2c:b8:71:bb:96:90:7d:56:b9:77:6e:50:a8:8b:
                    84:cc:41:8a:65:9a:0a:d6:66:23:1f:06:c8:ec:9a:
                    8e:3b:4c:37:df:51:0f:cf:6c:0c:c9:d1:c4:d8:e1:
                    74:9a:9b:6a:2f:f5:3a:9a:70:ec:5f:32:38:7c:5e:
                    1c:16:81:5c:9f:6d:77:10:8b:b7:25:67:d0:5c:ab:
                    bf:37:12:b9:74:b4:4a:f9:e6:cf:d6:0b:ec:29:44:
                    d5:b7:8a:12:06:a2:c6:c5:ae:2f:c3:72:59:d0:8b:
                    61:64:91:eb:e4:ee:93:8e:ce:a1:38:4a:60:a2:e8:
                    64:ef:69:8c:fe:27:42:94:87:d2:f9:79:56:80:17:
                    ff:95:31:e0:9e:2e:f3:07:44:9f:79:ca:8f:3d:9f:
                    94:6a:75:8f:50:be:07:56:76:b7:e2:52:7f:2a:43:
                    cb:f3:22:52:33:15:81:05:b7:04:4f:b5:ee:10:30:
                    43:09:a6:8f:60:5a:f4:0b:ab:e9:34:14:02:93:e5:
                    6c:0a:3c:86:73:f5:ef:40:5b:87:1e:8f:5f:cf:91:
                    3f:45:34:0b:0f:73:8f:53:9d:a5:a8:6d:23:e7:80:
                    87:e0:b3:fd:22:94:e3:e7:ba:bd:b1:a3:60:b4:75:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:01:5E:93:DD:CF:03:7A:66:98:3A:3F:72:5D:2E:A9:D5:3C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/329c0983-6ec7-36ad-82d7-96fd35e29e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.crl

            X509v3 Authority Key Identifier:
                keyid:AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:fb:e9:9f:bc:4f:91:b2:69:d3:c7:8b:0b:04:49:7b:e1:
         1f:fa:f3:9b:f1:ac:6a:41:57:0e:a2:ea:48:13:f3:db:ac:85:
         5d:c8:6f:92:2e:db:bf:20:e2:36:fd:fb:54:87:59:72:57:bb:
         e9:82:0b:75:64:f3:84:91:5e:b1:fe:e6:c9:23:3b:8e:07:73:
         4f:db:a2:13:15:c0:8d:19:ae:0a:4c:51:f4:34:68:79:b0:19:
         b8:60:4b:51:c8:c1:7c:f1:18:71:98:99:97:ee:eb:5f:9c:70:
         2b:f1:9a:27:e5:99:5f:9e:80:29:5c:84:c8:51:20:6e:51:f9:
         05:4b:ba:e5:0c:d7:4a:5f:07:e7:d4:a9:87:5c:a1:b3:03:d4:
         2d:84:15:8d:de:01:b6:2f:73:6f:3c:e4:8f:ec:33:53:f6:14:
         61:da:54:27:01:76:a7:0f:f8:e4:1e:5c:87:31:c7:29:00:3c:
         87:73:cf:95:ca:5c:09:11:95:88:aa:41:ab:3d:44:4a:36:01:
         b3:ab:eb:65:aa:80:8a:1f:ea:ea:c8:55:e1:25:4b:d1:dc:ce:
         e9:c5:de:b0:11:0e:1b:dc:5c:78:01:6f:ab:bc:b7:83:d5:f9:
         06:c2:72:32:db:04:56:54:c5:4f:b9:98:05:56:06:0d:20:5d:
         ab:dc:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:42 2025 by rpki-client