Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa
File:                     2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa (raw, json)
Hash identifier:          BSLFgmbRn4QYwqvqAK9CYbF66RPCi12FAVSUGVoRAZM=
Subject key identifier:   6B:FA:8C:B4:2A:11:B0:98:4A:2B:4E:50:9E:B1:F5:7A:AC:84:5B:09
Certificate issuer:       /CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
Certificate serial:       010D0C9F4328584B52A74F41A11BFF0192B23BD8
Authority key identifier: CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     203380
IP address blocks:        104.152.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:4f:41:a1:1b:ff:01:92:b2:3b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=dbe3e71c-84e3-4c48-b2ba-e00c41d8300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:a9:c3:f2:84:3a:56:7d:a8:32:4c:5f:ec:
                    1f:d1:97:20:c1:3f:a6:cb:f8:65:21:bc:59:95:6a:
                    6b:21:46:83:7c:11:66:b2:24:af:fa:73:b4:99:11:
                    66:9f:7c:75:cb:dc:66:a9:eb:b4:89:d2:31:a0:4d:
                    2a:44:03:66:31:07:d9:04:df:59:98:dc:7a:c4:ca:
                    33:5b:8e:b2:d6:a2:25:0f:66:89:cc:94:42:a4:84:
                    90:ec:d3:18:9c:25:3a:01:86:5c:43:9f:e2:8e:fa:
                    bb:61:01:58:ab:9e:e5:c1:72:c8:d3:c6:d7:1c:db:
                    74:ba:c9:aa:73:01:5b:af:c1:1c:64:63:27:67:58:
                    06:f2:82:20:b3:f3:e0:9a:f0:a7:dd:1f:85:68:80:
                    68:f2:da:80:03:78:9e:7c:04:b5:66:41:aa:23:eb:
                    58:dd:5e:75:e6:c6:aa:6d:30:4c:49:45:0b:17:43:
                    d9:37:ce:78:f6:cc:7e:06:09:6e:82:7f:de:0a:68:
                    15:00:05:d0:26:68:8d:6f:c9:b2:9f:58:93:cc:59:
                    3c:94:6c:dc:76:f7:05:b7:eb:d8:14:5a:67:d7:fa:
                    8e:65:7b:00:e4:36:e5:48:ad:e8:fc:aa:1d:32:8b:
                    2f:eb:f0:61:a7:5e:f5:68:08:65:a9:bd:b4:f0:45:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:8C:B4:2A:11:B0:98:4A:2B:4E:50:9E:B1:F5:7A:AC:84:5B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl

            X509v3 Authority Key Identifier:
                keyid:CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:92:3e:99:e3:41:20:e0:ec:e9:d4:eb:69:90:c8:f1:df:59:
         bc:0e:73:7b:60:9f:18:1d:79:96:9f:51:8c:a2:9c:de:9f:91:
         ac:53:c7:69:da:25:a3:a4:3f:d0:f5:02:f2:9d:68:e4:a9:47:
         50:68:f8:13:2d:65:92:f7:42:16:14:f1:9f:d5:20:7a:7d:75:
         2a:b8:28:fb:2f:8c:9e:bf:20:a2:89:e6:1a:33:56:43:7d:dc:
         aa:2a:c2:ea:f3:6b:9a:ad:09:cc:83:79:ee:4e:f7:41:06:23:
         53:0e:b1:7a:9a:77:8e:84:f7:56:c7:c8:a2:4e:c4:00:80:11:
         6d:46:ff:15:5d:50:70:ee:1b:c6:b5:9b:fe:bb:4c:c3:8e:a2:
         1b:2a:81:35:fa:ae:21:fd:90:fc:ea:49:cf:da:c5:d0:7f:74:
         25:57:74:8d:16:3e:ec:96:b9:55:c8:d0:ef:07:4d:bd:77:50:
         13:01:b2:a3:30:c0:e5:4a:70:ef:f5:14:57:d7:8f:98:82:2c:
         63:37:e4:13:43:79:f2:7c:ef:e1:ec:4a:22:15:30:5b:0d:0d:
         7a:f5:6e:ec:0f:db:05:e2:9e:1f:61:e7:97:53:74:fa:5e:ee:
         e2:ea:ff:8b:05:b1:76:b1:df:83:c4:e3:68:87:06:d5:90:9b:
         a5:3e:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:54 2025 by rpki-client