Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
File:                     8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (raw, json)
Hash identifier:          56P+fWwSKGmsgCjbSPpaMeMUW3eJlFSNb35wOvVMWb8=
Subject key identifier:   D7:98:79:06:7A:FF:48:4A:F9:63:3E:FF:37:5D:B8:CC:EB:0A:84:72
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584B48E1BD9DCE5CA08AF90D1320
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     20237
IP address blocks:        192.103.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:bd:9d:ce:5c:a0:8a:f9:0d:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=3d9cf0e5-eef0-43a1-97a5-ace4942b173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:3f:7e:f0:8d:56:9e:b0:84:32:31:3f:ee:
                    be:6f:a5:51:0e:96:17:2a:e0:2b:cf:28:7b:6c:23:
                    0e:de:a5:68:70:a1:cc:4f:9c:ce:1d:22:90:0b:fb:
                    06:78:58:43:28:8c:f2:cb:c8:f8:2e:0e:b7:ab:d4:
                    5b:82:a2:74:fb:21:91:91:bf:0f:07:5e:6e:3c:f7:
                    5a:99:91:6c:a5:30:23:5b:bd:db:f9:9a:f5:d5:ab:
                    a8:8b:22:d9:99:f1:83:2f:82:a8:c5:e8:0b:24:30:
                    e8:6a:6c:fb:ef:54:be:54:fd:2c:16:7c:ad:42:22:
                    27:90:07:59:b5:e6:1d:38:dd:68:37:10:57:b0:67:
                    43:92:72:0b:86:d4:02:f0:50:1f:11:62:12:fe:84:
                    36:9e:99:12:b6:a5:68:63:9d:71:00:b2:ed:8f:46:
                    fc:4f:78:9b:82:53:af:e3:0a:5b:7f:e6:15:f6:ae:
                    aa:4d:01:ed:55:e5:04:70:e9:d0:69:94:b4:75:ef:
                    03:0f:02:2b:e3:c1:b9:8e:07:98:f0:b3:bb:f0:3b:
                    ee:3a:cf:24:e8:26:86:55:b4:ab:d4:ea:ee:76:de:
                    cd:18:3e:ca:f5:1c:d3:b0:76:a6:fd:b2:c6:6e:b6:
                    27:94:8b:cb:fd:f2:02:e7:c3:2c:ae:88:68:d3:59:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:79:06:7A:FF:48:4A:F9:63:3E:FF:37:5D:B8:CC:EB:0A:84:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:6e:e3:15:78:ab:38:24:80:6f:dc:a0:37:ad:05:c6:81:
         4b:ce:80:c6:07:f5:93:d0:5b:5d:da:f7:16:24:c4:0c:9d:32:
         3c:59:64:2f:69:4d:75:b8:8b:5f:b4:01:e6:68:51:69:8d:36:
         ab:d8:ff:63:fe:f1:2a:47:06:9b:7d:25:91:06:31:ac:5a:a4:
         83:45:5c:29:9d:0f:6b:04:69:c6:49:e9:5f:33:8e:57:8b:8e:
         78:ce:a9:76:7d:75:ff:80:99:8c:8b:54:a4:47:3b:d2:b6:63:
         42:87:d2:db:32:b5:8e:5f:11:da:07:81:3f:94:21:86:39:cb:
         11:4a:5e:cc:5b:62:a1:77:cf:23:dc:23:59:c8:e5:be:56:32:
         d5:68:33:a2:5e:2f:2e:0d:b5:8c:b3:48:9b:5c:1f:88:30:f1:
         3e:a3:b5:93:6e:8f:bd:e1:08:55:4d:e8:38:4e:ba:70:4a:f6:
         b9:17:be:57:ad:26:78:28:e8:7e:6a:df:28:08:07:77:75:c4:
         4d:5e:99:6d:03:49:6f:3b:83:48:cc:e7:f6:e0:a9:45:38:7c:
         1d:dd:a5:0c:56:a8:25:bf:ac:9a:1e:bb:b1:ab:4d:71:5e:da:
         f3:a1:2b:f2:86:05:6b:78:57:c2:12:f6:c3:1a:3a:0c:04:73:
         44:1e:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:06 2025 by rpki-client