Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa
File:                     f8db3558-5be9-382a-aa31-7e42fffa9832.roa (raw, json)
Hash identifier:          1Sw6MeH/v+cj73NjAak/mNWVnbTvWwWIYDiGITvEMw8=
Subject key identifier:   98:4E:83:51:8E:A3:6C:EF:D7:E2:A6:A3:58:C6:F0:DE:8C:B6:AC:4F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11CB31DE7D2DCED0D01780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        209.53.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cb:31:de:7d:2d:ce:d0:d0:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=c2242a35-96fb-4d24-bd19-d5322bbf7fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:9f:cc:74:9f:73:db:37:9e:ff:ce:69:c3:
                    8a:05:17:81:98:67:5f:40:ba:a9:29:e3:5c:01:02:
                    9c:95:cc:92:fd:b4:54:f0:cb:ea:73:19:54:43:92:
                    02:7f:f3:49:b2:19:36:5a:d2:b1:97:81:e9:f5:2a:
                    e8:46:8f:4f:9b:f6:15:c6:b0:d8:ed:b7:7b:05:df:
                    5a:e0:23:5c:e1:3e:f7:74:ad:11:6b:e3:d4:44:0e:
                    c4:aa:e8:6f:a5:61:a5:df:79:e6:e5:ae:56:c1:03:
                    0e:39:42:ec:8b:0b:6a:02:87:66:d8:1d:a5:63:db:
                    f9:7b:68:08:97:b9:ef:24:c2:c2:36:a3:25:45:40:
                    4e:e8:5e:3c:3e:b8:80:19:9b:f2:96:85:e2:3f:b6:
                    02:b5:16:13:a4:3f:35:1f:0c:b9:c9:a3:d5:ba:ff:
                    fe:62:04:fb:83:6c:b8:cc:66:41:10:e8:88:02:41:
                    d1:3e:b0:40:1a:27:10:7b:e6:b7:82:32:c4:a7:ee:
                    ed:7c:0a:b9:14:07:3d:ed:6e:71:29:cd:15:5f:dd:
                    8c:cf:ca:d5:36:f1:22:bc:1f:c0:c7:6c:de:bd:7c:
                    f2:6f:a6:c1:ac:c8:ae:e8:da:3f:61:df:4f:ba:d3:
                    7e:bf:3b:f2:b6:de:1c:a1:fd:05:3a:f3:5d:e0:43:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:83:51:8E:A3:6C:EF:D7:E2:A6:A3:58:C6:F0:DE:8C:B6:AC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:ff:32:24:bf:b4:fa:25:ec:ff:3c:47:02:70:b5:e4:6c:
         fe:6d:5e:72:b1:fb:72:51:bf:8b:f6:00:31:75:37:42:0e:23:
         d7:c6:61:59:5d:f1:44:25:a1:1c:b3:ea:cd:3e:01:17:2c:73:
         c5:8f:3a:36:bd:e0:56:7b:f0:6e:1a:65:e7:f9:93:57:eb:a6:
         27:b7:c0:6e:6b:43:3e:64:b1:5a:56:be:64:e2:02:f4:94:ba:
         dc:01:64:0b:f4:f1:0a:f2:c8:88:71:b8:01:fb:9a:9b:eb:68:
         7b:f2:d1:f2:5d:66:a3:dd:38:2e:e1:b8:19:dc:58:40:fd:9c:
         0b:b2:d6:ed:fd:d7:ba:32:b4:79:bf:c3:c7:8e:59:ac:3e:71:
         ff:7d:7a:f4:89:c9:1c:39:d1:e3:c9:19:bc:35:6e:59:5a:3b:
         d7:57:db:ed:fc:17:85:f6:25:ed:cb:0a:fd:e4:9d:3c:c5:25:
         88:e0:24:21:5b:35:79:8d:f5:5a:6f:80:60:23:ca:e3:e2:cc:
         ea:57:97:2e:cb:91:39:dd:04:2d:17:a3:af:f1:96:9f:71:d2:
         39:b6:19:cd:0b:05:25:cf:f3:e9:6c:55:d2:a0:8c:5b:6e:5d:
         0c:94:6b:19:93:97:33:49:9d:ce:e0:49:0e:8f:57:e8:ad:f7:
         21:a1:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:07 2025 by rpki-client