Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa
File:                     fdf3fae6-0252-3bda-a826-286a240b5e91.roa (raw, json)
Hash identifier:          kSajkgVncQ7Jz/ljGFRzy27/lRKcNGWPjQOMxCcNj9k=
Subject key identifier:   7D:D3:AF:E4:3B:67:86:51:37:F5:4E:3E:2D:7A:F5:B3:F8:88:88:CF
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584B8BE23A9FCEE2ACB43FE93080
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     33059
IP address blocks:        209.42.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3a:9f:ce:e2:ac:b4:3f:e9:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=f0bf1bdd-a7b0-4a5d-a234-2073ae310c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:93:3f:f2:83:ae:45:56:f2:b8:f9:cf:23:
                    8b:8b:7e:ba:44:28:94:c6:85:82:70:51:88:e8:d3:
                    66:a1:ee:1a:c3:6b:de:f3:62:11:24:dc:4b:fb:33:
                    f3:18:9d:14:f6:ba:fd:7f:40:35:18:6f:a7:0b:cf:
                    3d:62:8b:87:a1:80:57:62:38:bf:13:5d:46:28:a6:
                    64:a0:43:0e:c5:38:7c:f6:63:ec:e4:9b:1c:7d:27:
                    dc:99:2f:0c:0d:42:37:83:fc:a7:fb:66:c1:bc:2f:
                    84:9d:74:96:0c:69:c1:73:5c:97:46:4e:88:d5:f1:
                    67:fa:07:cc:f3:5f:2e:9e:bd:1d:5e:e8:7d:1e:10:
                    ba:0d:ce:33:b7:0b:18:2a:ea:04:ab:1b:86:7b:ba:
                    e3:2b:eb:a1:c4:89:ca:37:67:26:94:26:9e:3b:43:
                    c2:a9:44:e1:0e:a2:ef:ba:59:a9:97:fc:23:f4:db:
                    68:cb:50:54:c1:0a:ff:24:6c:a9:8d:f1:f6:49:e4:
                    33:d6:b3:a9:46:46:58:01:63:73:28:4e:e2:a3:60:
                    15:f5:f2:1f:98:85:77:6d:bc:58:59:31:65:2f:60:
                    b7:09:bf:1c:8b:b4:3b:56:e8:c1:89:a5:ac:e6:b9:
                    7c:82:f7:6a:5a:46:1b:19:75:6b:02:02:77:53:ce:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D3:AF:E4:3B:67:86:51:37:F5:4E:3E:2D:7A:F5:B3:F8:88:88:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.42.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:de:7b:8d:59:85:94:6b:0e:9b:73:ef:2a:a8:1a:40:c9:
         c2:64:16:b4:35:c1:96:a5:10:70:9d:7d:6c:ba:cc:f7:89:f2:
         c2:70:20:e6:fb:47:ae:84:a4:31:12:ee:00:b0:9e:7f:e2:0e:
         1c:54:6b:80:44:5c:29:f4:3e:90:6e:c6:91:8d:bc:b2:d6:56:
         23:93:71:0e:cc:3d:34:71:3c:31:1b:8e:7d:56:8e:ce:09:f7:
         b4:fa:5c:b1:3b:b6:67:17:eb:01:49:6e:94:22:47:4d:c8:46:
         84:0b:05:03:89:18:0a:25:62:b9:2d:d3:6d:4e:f8:07:5e:52:
         6a:64:88:4f:25:fa:c7:e8:f9:99:94:98:56:83:02:33:bf:1c:
         bc:1f:3b:43:c5:2d:fc:d4:05:ea:58:bd:3f:83:38:b0:c0:ca:
         1a:3d:6d:c7:e9:ec:e6:50:ba:a4:c0:9a:3c:3a:0f:4c:d4:39:
         46:ab:de:d0:2c:f3:9f:d1:bc:9a:85:43:f4:e4:2d:4f:61:43:
         b9:2e:83:81:48:6b:29:1e:1e:3d:d6:83:5d:00:30:dc:85:06:
         ca:f2:2a:c0:f6:ff:4b:d0:25:90:ef:da:17:66:f4:5d:28:ab:
         24:50:b1:e0:f1:51:3b:f2:75:2b:96:7f:12:1a:c7:80:34:5e:
         46:89:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:12 2025 by rpki-client