Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa
File:                     1c410a85-ef61-329c-8758-bd379673e65f.roa (raw, json)
Hash identifier:          5VwN42kRL+NNCt8kWUMpE4jOylPwXo3IClB01Ztc8Cw=
Subject key identifier:   37:7D:1A:A1:B4:B3:BD:94:EB:9A:C3:02:F4:F2:0C:14:1D:66:39:15
Certificate issuer:       /CN=a56a3708-27fd-4435-a52a-57e44da7dab4
Certificate serial:       010D0C9F4328584B891773329865BE063BE3F6A8
Authority key identifier: 63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     26498
IP address blocks:        204.114.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:73:32:98:65:be:06:3b:e3:f6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56a3708-27fd-4435-a52a-57e44da7dab4
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=40013271-0b27-46b5-ba8f-604f1e310b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:64:ec:64:c7:ba:a0:cb:6a:e8:5e:52:5e:
                    b6:bd:2f:22:4a:50:7b:c2:62:6c:36:74:bf:65:e1:
                    5b:86:38:be:75:d1:d0:b6:82:e0:5b:77:84:aa:c2:
                    97:77:69:80:99:e7:4b:1a:a5:72:49:40:a8:e0:ad:
                    d7:61:7f:72:fa:a5:e3:4f:34:53:03:34:c5:a7:29:
                    96:17:3b:e6:5a:db:15:91:36:90:a1:6f:14:a5:fe:
                    ce:3b:ea:71:40:01:cc:3f:5b:d1:da:88:33:55:24:
                    88:2a:3c:f3:10:e0:4a:34:ab:4e:48:09:bb:f9:3a:
                    d4:7b:1f:4b:2f:b4:47:e6:3d:7e:3f:65:17:ac:01:
                    d3:c1:ab:18:51:b4:79:c2:7c:9a:82:d6:89:6b:13:
                    32:81:95:63:d9:fd:f6:9b:37:f8:0e:b4:c3:4c:8b:
                    72:b0:34:5d:aa:d2:0f:79:8d:88:8d:02:c7:41:a7:
                    c5:46:d1:d2:c6:a1:e1:db:76:4e:74:08:fb:60:c4:
                    01:34:64:27:b0:47:b7:db:fd:8d:82:ac:14:39:30:
                    34:e7:c2:67:e4:53:56:54:85:59:0a:5f:ee:ea:7e:
                    9f:5b:78:e7:2e:30:5e:54:30:51:b1:82:89:b3:08:
                    84:38:60:e0:6a:2b:1d:a4:dd:e6:d6:7f:75:ed:fb:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7D:1A:A1:B4:B3:BD:94:EB:9A:C3:02:F4:F2:0C:14:1D:66:39:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl

            X509v3 Authority Key Identifier:
                keyid:63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.114.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:99:ae:bf:23:e7:7b:d4:0a:fb:53:51:8f:64:3a:41:0c:
         22:75:10:0d:85:3e:54:ef:56:59:ea:9f:b8:6a:46:1c:42:6e:
         47:ed:56:fc:4a:06:88:be:4a:e2:5e:e8:84:6d:fb:ff:87:b6:
         ec:d5:85:90:0f:c1:14:d6:5c:cf:c4:1c:6b:ce:bc:62:51:6f:
         27:b7:27:07:57:d9:ba:ff:82:3b:1b:be:1f:48:38:20:c0:3b:
         a3:3f:ed:32:f4:e8:74:3c:e6:46:81:4d:53:2f:ca:78:75:ff:
         30:9b:79:f7:72:ec:21:25:f1:dd:a7:72:3c:8f:47:78:94:33:
         5e:b1:66:0d:34:af:80:0a:13:ca:43:1c:45:32:13:44:1a:27:
         9a:50:d5:87:8c:19:c0:fe:55:60:4e:54:61:c1:b5:f8:4b:07:
         9b:cf:48:82:c9:1e:cb:79:ad:64:6b:bb:dc:55:0f:00:2b:3c:
         ae:b3:d7:fe:b8:01:c4:d1:8f:98:9d:f1:da:aa:1c:69:dc:58:
         c1:e4:39:2b:73:31:48:dc:dc:b1:5b:df:d4:9b:f3:ef:60:ad:
         51:62:5f:24:64:1b:9e:99:20:0c:23:ec:91:68:ba:b8:b7:18:
         07:18:9a:05:cb:67:98:c7:07:d8:5e:a9:a2:39:50:fd:da:6c:
         60:3e:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:23 2025 by rpki-client