Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa
File:                     744b6ffa-3be1-313f-b480-477a52ccfd2b.roa (raw, json)
Hash identifier:          LFFllovNUH8sXvAAuW3oJrsPS1FZtXOX1WFxPw7UaRQ=
Subject key identifier:   0A:A0:B4:5E:7A:AC:89:52:CF:DE:1F:1F:74:5A:C7:BD:28:54:6F:C0
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B8BE23C6AF2B8BEA971B07B00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     11030
IP address blocks:        199.106.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3c:6a:f2:b8:be:a9:71:b0:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=afdb5bb3-fa16-425f-9e93-396c33ba36e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:f2:c5:7c:b7:e5:7e:68:37:f2:2a:a4:be:
                    13:a9:06:14:c2:64:74:6e:01:c2:9c:8e:52:ff:c1:
                    f5:19:95:ef:1e:75:77:4a:35:7e:8f:fc:fa:77:11:
                    d6:7a:15:3a:24:01:43:63:39:77:d2:2d:59:31:60:
                    b6:12:f3:ec:d4:b9:4d:14:ff:1d:70:20:f0:b4:0f:
                    0b:e9:0c:b3:e3:b8:b3:e0:92:86:7e:c9:8c:0e:8f:
                    55:fd:b0:1d:92:23:a0:af:81:59:6b:2d:e4:ce:ae:
                    0a:19:69:52:30:82:a7:34:e5:ee:46:d5:89:96:16:
                    45:20:6a:48:4b:09:83:b1:2d:49:75:61:00:61:a5:
                    7f:05:8c:5b:f0:3f:b1:ab:70:99:90:c1:cf:5f:4b:
                    98:29:99:f7:9b:31:04:55:df:47:43:35:51:ce:78:
                    ec:dc:d1:dd:78:7b:ba:0f:20:80:78:a1:0e:34:8a:
                    74:6c:f0:c2:ed:f7:f1:2e:fc:66:f7:d8:c5:3d:fe:
                    d0:7d:a4:c1:e4:20:ab:11:d8:65:4e:f9:95:61:78:
                    be:a9:32:ef:55:89:a4:a9:8a:06:d2:a5:6d:0f:20:
                    8a:9c:54:76:76:ea:12:42:1a:fb:33:95:27:51:d2:
                    14:dd:3c:e1:5d:cc:c0:13:9a:d4:dd:5b:72:9f:02:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:B4:5E:7A:AC:89:52:CF:DE:1F:1F:74:5A:C7:BD:28:54:6F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.106.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:be:b6:dd:f0:b9:df:6d:39:6a:1a:8d:62:49:6d:17:d6:c1:
         33:81:f7:25:9d:00:cf:a3:b4:cc:f3:af:d2:b6:d8:3a:22:4f:
         15:40:23:ee:b8:1c:10:1e:3f:79:48:c6:64:6d:ea:9d:d9:80:
         7d:15:f8:d2:ae:9f:c9:b5:2b:97:c4:1d:11:56:92:3a:8e:bb:
         50:d4:ed:af:11:21:2c:06:57:bd:c4:d4:c5:31:49:65:66:31:
         e1:54:44:8a:71:c4:46:c5:37:c7:08:94:33:cc:75:4d:b6:3e:
         90:4a:d5:39:a2:c3:e1:0c:13:6a:0b:70:54:0f:a6:68:6e:2a:
         5d:6c:b1:94:48:f9:e5:d8:33:bf:1d:ae:a9:e3:61:86:bf:1d:
         88:57:fc:d8:8a:5d:66:bb:6d:53:33:c9:45:66:5f:35:60:c9:
         bb:d9:b8:f3:1d:47:64:13:b3:f9:71:5d:b7:13:bc:c5:3c:37:
         02:b2:44:13:b3:96:ff:ea:9a:91:52:fa:ef:43:8b:05:f5:ee:
         7b:06:cd:ad:f4:5e:7e:e6:bf:50:78:72:30:23:47:f1:89:da:
         fa:44:9d:65:b8:ad:b3:b3:57:34:29:8e:16:6d:1a:7f:89:db:
         53:27:27:69:1d:f5:0d:c0:a4:b8:8c:41:be:a3:5f:4b:14:46:
         fc:dd:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:40 2025 by rpki-client