Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
File:                     3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa (raw, json)
Hash identifier:          yPZklZ3d3hL9P7n0vUSfolCijNZbDZQFDiSjGIxTErE=
Subject key identifier:   4E:A7:1B:63:6A:DF:F0:FD:D4:7D:2F:05:4A:AE:42:84:DC:94:C3:E5
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584B7DECAF43CA0A0E4C05A27A80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     23470
IP address blocks:        208.67.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:af:43:ca:0a:0e:4c:05:a2:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=9e1b5cd3-c4ee-461c-8909-79e5973757dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bd:dd:87:93:19:fc:d6:ea:ed:3d:8d:e5:
                    8d:3e:52:15:c4:09:63:a0:be:72:99:29:74:6c:98:
                    59:74:10:0f:e5:43:ac:f1:11:79:23:36:bc:60:b4:
                    a3:24:96:37:da:de:36:19:44:48:14:7c:13:e9:8a:
                    a7:fd:40:82:39:e8:51:02:5a:6f:2b:1f:de:7e:26:
                    60:55:40:ee:3e:55:38:8b:bf:e7:43:ed:59:a3:67:
                    a4:ae:8c:2b:5a:ca:f0:cb:ee:47:12:e7:fd:b6:4f:
                    78:06:70:19:f9:39:f6:24:21:93:12:8e:70:db:38:
                    02:e0:1c:22:c8:c6:c6:5a:c2:8e:76:4e:8b:d5:d5:
                    05:fe:cf:72:ab:0c:cd:16:2c:e9:c5:5e:17:e3:98:
                    bd:ad:e4:fb:f2:41:47:c5:9a:ef:b0:39:2a:01:07:
                    6f:90:6f:c7:f7:89:c2:86:e3:de:d2:63:ef:a1:d4:
                    3e:cc:c1:c8:2f:96:b0:c3:9f:ad:92:8a:9c:c2:30:
                    e5:59:6b:92:58:61:51:a2:46:6e:cd:18:07:01:71:
                    8b:cc:81:a9:44:26:a1:4a:27:96:00:5b:3a:6d:2b:
                    7d:36:fb:2a:d2:85:98:c9:5b:b0:b1:21:f3:0d:09:
                    9c:5d:7b:b6:10:3e:24:c9:66:17:d8:2e:ac:a3:01:
                    b7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A7:1B:63:6A:DF:F0:FD:D4:7D:2F:05:4A:AE:42:84:DC:94:C3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:17:2d:6d:1f:7c:1b:0a:bc:29:e2:bc:f1:8f:41:23:1b:36:
         d9:91:21:81:01:f6:ed:5f:9f:e7:43:7d:97:81:d7:5d:c2:9f:
         2e:9d:aa:ba:c1:b1:25:99:f8:4e:5a:0b:4a:cb:49:ed:92:f7:
         00:4d:c3:b8:55:d7:52:5c:2b:71:a2:e0:21:4c:10:35:38:22:
         2d:44:c2:c7:63:e8:c1:32:a4:4d:34:04:13:83:08:a9:36:f0:
         70:d0:f0:2d:b8:7c:65:29:42:61:a1:4f:ff:11:ce:f5:4f:03:
         0a:d8:ae:37:8f:3b:66:34:16:f4:b2:db:56:1d:d4:da:c6:1b:
         78:5c:6e:d6:30:4a:d5:d5:44:1c:ef:81:d7:38:89:22:e4:38:
         2b:5d:08:41:c0:93:dc:d9:e2:02:50:e9:8e:41:17:00:e5:0b:
         16:22:68:3b:2d:80:0d:3f:1f:36:4d:34:4c:27:0e:cd:4a:1a:
         a6:96:fc:0c:47:39:02:78:b0:0a:5d:80:40:06:8b:cb:d2:52:
         36:47:a2:05:a0:1c:ca:95:67:72:cb:5c:ec:71:9e:99:7a:f8:
         21:f1:59:11:f0:0d:ae:ef:f6:c3:6f:35:ba:80:3d:e0:52:59:
         32:e9:00:19:7a:5c:58:ad:6b:d9:d6:8b:86:74:68:dd:7a:5f:
         29:6e:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:32 2025 by rpki-client