Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
File:                     5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa (raw, json)
Hash identifier:          LkgpSlhIZuZUG8g7J+YFrP10NTHTMAj4ceSZQlXPgLQ=
Subject key identifier:   F6:0C:1F:34:4E:18:F2:24:9F:F8:59:08:7B:2E:07:96:6F:CF:E4:BB
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584B79BCB55CED85A175164E9EE0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397422
IP address blocks:        67.210.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b5:5c:ed:85:a1:75:16:4e:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=25077bb3-c245-478b-8cc9-e4afee0c4d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:63:a3:0f:ab:87:e5:80:1b:4c:1e:32:34:
                    db:e9:46:d0:fe:08:6b:ca:da:3d:5a:88:b7:e6:25:
                    70:cc:2b:ec:6b:3b:a6:13:bc:17:8e:d7:f5:f9:b9:
                    40:c6:cf:fc:cd:98:ac:f1:db:a9:9a:4d:34:32:53:
                    4f:c2:eb:59:78:92:98:dd:c4:bc:8c:44:06:50:5f:
                    2a:b6:92:bd:6d:a3:82:c5:82:28:26:41:e3:34:63:
                    aa:9d:7b:ff:de:37:b6:c8:c9:36:d1:10:b7:87:86:
                    9f:a0:22:c7:31:95:6e:39:25:eb:2c:bd:ea:6e:09:
                    90:ed:ae:d8:72:5e:bf:6a:12:a3:7b:e4:47:b1:4b:
                    85:d8:ce:18:d6:d7:d9:f5:4d:bb:b9:c9:d7:79:77:
                    10:9e:dd:86:43:b5:f1:82:4f:7a:fa:a0:87:60:6a:
                    df:0f:32:d5:bc:e6:52:a2:13:30:57:ff:d0:c0:1a:
                    cb:b9:68:b5:61:1e:5b:e8:74:96:d1:7b:6b:39:00:
                    ea:2f:9b:8b:62:fe:43:73:17:b4:c1:3a:5d:97:3e:
                    8b:ea:1c:4d:c5:d5:f7:ed:df:89:bc:de:06:38:05:
                    1b:21:51:bb:e8:cd:74:95:eb:2f:e7:cf:07:c9:97:
                    d0:b1:f5:14:63:44:0e:b5:65:f6:d1:8b:43:29:a7:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:1F:34:4E:18:F2:24:9F:F8:59:08:7B:2E:07:96:6F:CF:E4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:76:25:69:2d:59:b6:4b:9e:43:23:e1:10:07:7b:4a:af:
         49:cd:c4:77:94:2c:3c:66:10:6d:4f:08:b0:31:d7:91:7a:e9:
         89:07:ae:62:d9:0a:88:7d:35:cd:a6:11:11:b7:8e:d1:41:a3:
         f8:7c:c0:cb:c5:11:e3:db:c5:a4:67:d6:10:3e:4f:23:27:e0:
         df:b4:ab:57:2a:bb:b5:cb:ba:66:00:1b:71:8a:e7:92:19:62:
         db:6c:f2:8e:a3:8c:21:04:d5:cd:0a:e1:7d:bc:9a:7a:6a:b5:
         24:b1:ea:5d:74:f1:b5:0f:f1:f4:20:6b:70:81:ed:ef:63:b4:
         87:2b:82:ff:c5:58:45:e3:09:14:86:76:64:13:a0:39:26:c2:
         cb:11:79:74:ae:4e:27:50:4c:3d:24:90:75:6c:01:e4:60:2e:
         8a:ac:8d:91:f3:78:17:f7:a1:9a:b8:05:0d:44:59:b4:ea:ed:
         81:65:b6:b8:b0:83:2f:84:28:84:9d:57:7c:bb:a3:82:2f:07:
         29:b4:fb:a0:2e:88:5b:ca:f2:0b:b1:cf:4f:90:28:e9:91:84:
         a8:a6:71:55:85:e1:3b:45:94:3b:28:25:8f:77:52:92:15:c1:
         eb:19:e9:70:01:58:cb:77:26:89:7a:90:ed:1d:4d:39:e8:7e:
         91:4b:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:12 2025 by rpki-client