Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/4076860b-5b57-37ae-abe5-e97259e7c07a.roa
File:                     4076860b-5b57-37ae-abe5-e97259e7c07a.roa (raw, json)
Hash identifier:          K/j0MJfbt7MRIWEfEdBzLaA+NPN0xYSSGVFIfVtsXjA=
Subject key identifier:   A4:34:14:EE:BC:13:D0:5B:2C:79:60:12:2B:05:E2:F8:0D:26:33:F3
Certificate issuer:       /CN=f4966faf-2622-44f3-9089-90a353bb44b9
Certificate serial:       010D0C9F4328584B7DECC42D8A66EFB414DAF060
Authority key identifier: 1A:C4:ED:F1:37:2E:4C:AD:A3:B7:E8:69:50:70:70:DF:0D:08:BF:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/4076860b-5b57-37ae-abe5-e97259e7c07a.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     62541
IP address blocks:        198.24.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/f4966faf-2622-44f3-9089-90a353bb44b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/f4966faf-2622-44f3-9089-90a353bb44b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c4:2d:8a:66:ef:b4:14:da:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4966faf-2622-44f3-9089-90a353bb44b9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=33095cb8-e23c-4572-87a5-68cf8cdfdb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:8c:6d:45:07:7d:06:cf:c7:ad:74:62:8c:
                    0e:66:fc:59:35:ed:ce:52:f6:06:67:7b:d4:83:3d:
                    c5:a9:cd:e8:0b:a1:8e:18:aa:e2:7a:32:f3:81:05:
                    43:55:fb:be:5b:e4:a6:a9:bc:f0:d6:9a:72:0a:64:
                    39:91:c6:6b:c6:50:88:50:89:24:42:c8:bd:b8:e7:
                    55:81:6b:c8:e4:ce:be:5c:be:57:99:08:97:74:4e:
                    aa:54:43:0e:8e:fb:16:24:bc:8f:c8:ff:ed:d1:e9:
                    9d:58:6f:77:7f:0b:06:e5:e2:f1:69:b6:f8:e9:49:
                    8b:a9:aa:12:92:24:80:59:b6:bc:6b:be:e0:a8:43:
                    e2:6f:50:b7:6b:75:2d:cd:45:f9:04:16:7c:d3:a8:
                    55:5e:28:62:a0:33:f7:e6:dc:d7:a2:4d:3e:21:b1:
                    c1:3a:de:14:e9:35:35:71:3c:3c:f1:67:8e:74:b7:
                    25:04:3a:89:6a:bf:8b:bb:1c:69:16:e0:b2:c9:ed:
                    e1:da:3e:76:1e:ed:ad:31:d0:b7:da:3b:15:19:07:
                    5f:d8:69:47:f0:43:6b:c1:e9:14:f5:f6:6d:dc:9d:
                    1e:a9:96:36:54:d8:aa:72:a6:d9:bc:be:16:13:1d:
                    bc:fd:a8:e7:22:62:eb:6d:90:3c:3d:9d:8e:9d:55:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:14:EE:BC:13:D0:5B:2C:79:60:12:2B:05:E2:F8:0D:26:33:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/4076860b-5b57-37ae-abe5-e97259e7c07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9/f4966faf-2622-44f3-9089-90a353bb44b9.crl

            X509v3 Authority Key Identifier:
                keyid:1A:C4:ED:F1:37:2E:4C:AD:A3:B7:E8:69:50:70:70:DF:0D:08:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4966faf-2622-44f3-9089-90a353bb44b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.24.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:a5:5e:01:5c:e1:10:70:01:52:2d:97:f5:73:16:21:4d:
         a8:75:eb:b7:ed:23:e6:a4:3e:0a:55:a8:b4:0f:72:e0:26:30:
         1b:c5:87:8f:70:69:ad:79:2a:d2:de:5b:bb:b9:a7:4b:3d:84:
         ef:84:d8:0b:3a:a0:0b:5d:fd:92:3f:5f:02:47:7d:cc:a6:5c:
         cb:f4:4d:5a:e7:1a:68:f9:bb:c5:18:8e:cf:c9:85:30:f4:12:
         90:fb:65:41:39:6b:1c:ce:ef:08:16:d3:97:dd:51:66:e7:f5:
         75:52:5c:db:b1:d7:14:4e:b0:d0:57:0e:cc:1e:70:f1:1d:1e:
         6c:90:82:69:04:4f:9a:20:46:7f:a5:a3:8c:13:0c:1a:49:4a:
         ec:bb:80:75:ea:b0:76:5c:b3:0b:f0:c2:22:8a:b8:b0:f4:58:
         3e:fb:87:dc:a4:a4:1b:32:3a:f2:25:29:92:2c:6c:92:0e:74:
         07:2c:66:6a:fd:8e:28:90:48:e0:c2:e0:4c:54:6b:c6:d6:59:
         df:47:c3:05:bf:ba:0b:77:bf:44:78:c1:4b:28:ce:b2:e0:9b:
         0c:63:51:96:dd:48:f9:c0:33:09:6d:39:4b:7d:07:45:45:a7:
         ad:4a:df:6c:3b:ca:10:4f:68:24:66:58:6e:a6:e7:b0:61:bb:
         71:a7:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:03 2025 by rpki-client