Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aab8db6d-30bb-3602-b206-69f22017d07b.roa
File:                     aab8db6d-30bb-3602-b206-69f22017d07b.roa (raw, json)
Hash identifier:          1d9pK4rdmlZt0xtsyFqHoq8kIvVfLRAeuX67B6VOSb4=
Subject key identifier:   35:44:94:69:50:0F:2A:E1:B4:69:C2:A1:87:57:3B:B3:C5:15:2A:C3
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B328C32F9F8CA9E83D2CD8A00
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aab8db6d-30bb-3602-b206-69f22017d07b.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     812
IP address blocks:        174.112.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:32:f9:f8:ca:9e:83:d2:cd:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=103f73e5-df77-486a-a1ba-e0069e2ab13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:b6:9e:a1:b8:31:74:73:81:ab:5f:e9:11:
                    23:66:79:e7:c1:c9:21:eb:3e:6b:48:85:07:e3:07:
                    78:6c:ef:00:9b:df:ec:89:95:e9:7b:8b:07:30:39:
                    3f:2f:0a:9d:7d:ff:0d:59:2b:da:fe:98:3c:a7:1b:
                    16:88:bd:92:c9:2a:65:0e:a9:e3:da:81:eb:b6:66:
                    bd:28:e4:91:20:ef:0e:2a:a6:3a:36:48:0a:e5:d0:
                    56:c5:7c:11:6b:f0:cc:bf:7c:b4:90:6a:c5:e8:26:
                    80:54:b1:d3:ae:a0:4b:ec:05:49:e6:5e:f5:4d:8c:
                    7a:f5:eb:b6:ba:f7:68:42:e8:38:42:22:16:45:1c:
                    13:e0:8d:27:82:c2:a8:e1:09:3c:8d:27:7b:9d:9a:
                    7a:b3:91:01:f7:c8:09:72:ed:a2:76:60:25:c7:d2:
                    69:8b:61:0f:26:c9:d0:8e:63:27:b9:64:02:1a:00:
                    bb:7c:ed:eb:da:6e:37:e8:f9:41:8e:58:75:3e:d4:
                    53:07:a0:89:23:1b:bd:38:33:08:fe:cc:70:be:9a:
                    9b:78:82:a0:54:91:de:e8:d9:8e:6e:da:ed:97:5a:
                    a6:d5:00:17:ca:24:81:8e:b6:f0:4a:a4:24:b8:41:
                    2d:35:0e:66:fc:44:66:e6:d6:6c:d8:c6:72:15:e9:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:44:94:69:50:0F:2A:E1:B4:69:C2:A1:87:57:3B:B3:C5:15:2A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aab8db6d-30bb-3602-b206-69f22017d07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.112.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:28:91:f8:fd:86:aa:11:3c:ba:bd:e8:25:ab:fd:5c:f9:
         77:1a:ef:f1:ed:10:ce:ba:4b:5d:30:46:86:31:80:57:f7:eb:
         86:fb:4f:2e:c7:89:53:e3:0f:33:1d:5b:9c:59:ea:b9:f0:52:
         0f:88:2d:90:61:17:7c:cb:2a:31:7c:fb:5a:18:75:84:4c:06:
         62:20:ad:61:28:92:f7:2b:3a:b3:ad:72:2d:e4:9e:0d:2b:d8:
         db:d9:ae:1b:5d:e1:d7:cd:65:3b:1d:2a:05:d4:a4:8c:96:99:
         c7:b0:9a:2c:17:ba:7d:49:3c:9a:03:de:cc:9f:bc:c4:32:8c:
         c4:ba:d5:be:f6:63:80:7f:bb:2b:17:f0:44:d7:fd:bc:36:14:
         c8:51:6d:dd:70:aa:4c:dc:31:9a:9c:44:32:91:25:f3:1d:2c:
         58:b0:01:3c:81:51:8c:58:3c:fd:5e:01:c4:82:78:b7:b5:86:
         b2:36:71:9e:bb:92:7f:0a:de:23:1b:20:97:08:29:e3:9b:41:
         62:95:17:1c:69:97:11:81:b9:06:4a:bc:52:f3:66:51:e7:ea:
         ff:f4:44:be:a4:21:34:79:e4:e1:70:c5:2b:60:df:9f:a7:d0:
         38:e4:7a:d1:8d:9a:9f:3a:3a:c1:7f:7e:79:2a:d2:97:54:ad:
         43:a7:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:23 2025 by rpki-client