Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0373d239-b0e0-39ab-b3e8-b56712924ca2.roa
File:                     0373d239-b0e0-39ab-b3e8-b56712924ca2.roa (raw, json)
Hash identifier:          2Uc/xoiA+sQsjXK0ImAioAlNG65ClFnD2QwVEzYg1ps=
Subject key identifier:   45:75:68:2E:19:3A:2B:76:FC:23:A5:6C:54:D4:31:55:A0:C8:E3:A0
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584B875FE8FEA8F158C4B52FB080
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0373d239-b0e0-39ab-b3e8-b56712924ca2.roa
Signing time:             Wed 15 Oct 2025 10:15:04 +0000
ROA not before:           Wed 15 Oct 2025 10:15:04 +0000
ROA not after:            Tue 13 Jan 2026 11:15:04 +0000
asID:                     203963
IP address blocks:        173.249.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:5f:e8:fe:a8:f1:58:c4:b5:2f:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 15 10:15:04 2025 GMT
            Not After : Jan 13 11:15:04 2026 GMT
        Subject: CN=e00366a0-aec5-4f2a-96e8-bfdf7f9be35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:c4:a6:9e:22:19:e1:ac:65:3d:46:0f:23:
                    32:3f:62:c4:cc:fb:48:6f:0c:a6:44:33:16:aa:ce:
                    e1:17:5f:f1:35:27:bd:6d:bc:d7:d4:d6:22:13:53:
                    98:9b:7a:b0:d5:7b:3b:f3:3f:9a:d6:20:b7:51:8f:
                    ff:eb:ea:f9:12:73:a4:23:7d:04:dd:25:0b:05:a1:
                    45:ec:e5:8e:04:a6:52:ad:a1:5c:fe:75:c5:69:70:
                    98:3e:ce:90:3a:34:54:32:55:0b:33:1e:f4:29:23:
                    3c:b7:96:4d:40:f0:4e:28:78:4d:6a:69:1b:79:80:
                    81:f4:18:cb:54:c6:41:49:02:48:c7:5f:5e:f9:07:
                    d3:86:84:50:57:c9:9e:5e:3b:c9:b5:fb:51:bc:bf:
                    52:e2:7c:e9:05:2f:2f:6a:dd:c6:24:7c:8d:95:3d:
                    ca:63:da:06:89:cb:f0:99:25:26:00:bd:11:f4:4b:
                    da:94:cf:e9:23:69:01:42:e7:f4:ad:ff:67:9c:a3:
                    18:82:80:34:f9:56:30:6a:59:f9:c1:2f:72:70:eb:
                    05:bc:92:17:85:c7:2d:4e:f4:9e:ce:3c:76:b1:3a:
                    a3:15:57:89:7f:0a:a0:67:01:dc:52:cb:66:3b:e7:
                    da:a9:d5:0c:96:05:ac:43:09:3a:b6:12:d6:b1:49:
                    0a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:68:2E:19:3A:2B:76:FC:23:A5:6C:54:D4:31:55:A0:C8:E3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0373d239-b0e0-39ab-b3e8-b56712924ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:84:8e:ac:4c:68:fa:19:b5:2d:8d:ca:f3:dc:d9:7f:ba:
         0b:00:67:9f:f6:08:65:cf:89:5a:ea:27:b8:4c:61:ef:9c:c0:
         56:31:25:c6:99:52:e8:5c:42:c9:8e:7a:df:c0:5e:4a:7b:7d:
         02:38:2b:a4:1f:53:37:25:97:4b:1c:6a:04:0a:5c:09:5d:cb:
         57:27:1e:59:a6:14:8f:fc:0c:de:8d:57:07:90:b5:55:86:80:
         7f:8c:25:01:c2:6b:73:db:46:bf:6d:99:d3:d8:8f:b6:f9:e4:
         1e:29:7f:6a:bb:c6:f5:4c:87:de:43:58:c3:ba:6d:f0:25:b2:
         69:52:e6:62:0c:1e:73:0e:35:bc:7c:31:f1:0f:43:b8:a5:c2:
         7d:ee:84:53:c8:91:b9:4f:ad:42:8a:7f:cc:77:23:f2:25:25:
         d1:91:34:29:34:14:4f:ee:7d:66:d4:f6:b1:5a:74:67:56:6d:
         3e:1e:57:61:ad:e3:97:c3:64:d7:40:66:b4:35:df:21:2e:3a:
         30:4b:ff:80:c0:bf:ff:7e:c1:53:7e:cf:23:8d:10:bb:30:db:
         6c:ca:13:9f:68:f9:ca:dc:72:b0:49:6d:ce:39:08:a4:7f:36:
         58:8a:2d:39:c2:34:df:fd:59:10:e3:85:30:d9:83:23:ff:d6:
         2a:23:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:16 2025 by rpki-client