Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa
File:                     a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa (raw, json)
Hash identifier:          GuXXSQHVE+AdWf5DfLg6iGSA/FSl4TSthXtoKOOtBsQ=
Subject key identifier:   1F:F6:E8:52:CE:23:B4:AF:2F:36:B4:DD:E0:34:FD:10:98:EE:19:56
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584B2CF6EC64747A9DE2ABE4B940
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     26768
IP address blocks:        104.251.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:ec:64:74:7a:9d:e2:ab:e4:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=a7323206-7265-4140-91d8-b9d6e3160f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:0f:3d:85:b5:86:c6:a2:34:ea:b2:e4:1a:
                    a7:c4:09:9c:03:e4:91:a3:5b:76:17:09:30:e5:7e:
                    e1:2f:6f:05:6b:2d:f7:e1:44:b9:3a:42:20:4e:06:
                    b9:aa:6d:42:85:6e:c0:e6:8b:da:d2:bc:00:2c:10:
                    c6:83:07:88:07:8f:90:c4:d5:b4:a5:f1:86:5b:89:
                    e7:6c:16:0a:4f:73:5d:de:dc:65:76:95:de:d5:94:
                    38:86:5c:ec:b6:6e:bc:d5:c8:cf:36:eb:32:c6:13:
                    42:85:83:84:66:fa:89:ed:51:f1:fa:8c:70:b7:4c:
                    3f:81:73:59:79:31:d3:bd:9e:63:49:88:35:d1:a3:
                    f8:3e:ec:a3:41:42:3a:73:4f:cc:2c:0a:dc:39:fd:
                    b5:7f:10:7f:16:42:30:d7:56:3e:db:cf:df:f7:e7:
                    6f:de:01:2d:81:bb:20:b7:30:56:ca:43:31:d6:ae:
                    ed:2b:be:e6:cc:64:d8:ce:2a:40:5b:42:86:e4:e5:
                    55:87:26:e3:46:ab:27:70:c3:1b:1e:b7:ba:2b:f6:
                    2e:4f:b5:b5:88:e6:3e:f0:ae:96:94:c4:a7:e4:d7:
                    b6:3e:c9:55:27:0e:5f:ce:d8:6c:d6:af:16:69:f5:
                    fe:09:a6:fe:bd:76:8e:3e:22:ab:c4:bb:98:5e:fd:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:E8:52:CE:23:B4:AF:2F:36:B4:DD:E0:34:FD:10:98:EE:19:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2dd4bca-e66a-376c-b4ff-789e9f0d2310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:63:3e:c7:d9:40:40:27:e9:38:d2:36:f2:87:37:b7:2d:37:
         a8:19:2e:fa:6f:86:6c:32:be:51:f9:c9:d7:c9:d0:17:0b:08:
         ab:ea:51:9d:70:78:0a:88:82:94:2a:bc:29:73:f2:e9:ca:2f:
         be:6c:4b:12:9d:13:07:f7:dd:d6:93:c5:f6:2f:dd:fd:56:d3:
         24:69:57:0c:14:3c:46:ba:2f:1e:6e:4c:be:c1:60:af:b8:fe:
         3e:19:9d:82:7b:70:f8:e0:a3:c0:2c:f7:2e:b8:37:2a:e7:37:
         96:85:1c:82:d8:46:7e:39:94:35:4c:25:e9:df:c3:71:d2:46:
         1c:a1:ac:aa:e5:f7:7c:8d:7c:36:6c:f8:4e:05:b3:16:b2:6e:
         d2:f3:c9:70:12:db:b8:d9:b6:c4:23:76:5c:ba:4d:fb:ba:ad:
         2a:5b:39:b6:6e:13:c1:7a:c6:62:85:02:f7:b3:a0:28:4e:a1:
         10:88:af:8a:b8:3b:cf:3d:55:17:a9:91:92:83:a3:f0:ea:9d:
         c1:55:20:74:ab:27:61:15:8f:e4:e4:00:af:91:a4:04:86:af:
         9f:0b:f7:47:f6:83:02:c5:6c:72:b4:9d:60:f4:55:7d:aa:10:
         02:83:10:05:f7:f9:6a:8e:b7:47:80:34:ed:01:e8:ad:3d:ee:
         1d:08:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:57 2025 by rpki-client