Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
File:                     311c905c-c74a-3300-b053-5abc79b4a61a.roa (raw, json)
Hash identifier:          +ptqBEsJhGQAxK7p2x0E9gRbo0UCdrxZjXGVx1QsR8Y=
Subject key identifier:   FB:77:5F:55:04:D0:D5:9B:54:DC:80:BC:38:7E:15:3F:0F:F7:2D:0C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B5F375D77F0F5E895F50C9600
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        104.237.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5d:77:f0:f5:e8:95:f5:0c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=193aac77-bef5-428b-aa9d-494d3d4979e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:3e:b2:35:20:fe:81:c7:04:4e:11:81:10:
                    2c:a1:b7:44:83:d3:22:48:82:c0:d8:9f:c8:ae:bf:
                    d0:43:6e:a0:8f:db:6b:50:db:95:94:e0:19:73:50:
                    d6:d5:d8:7c:05:58:87:cd:96:03:d3:31:52:5a:ae:
                    ac:55:bc:19:9f:b2:07:ff:55:63:fa:a7:fc:0f:af:
                    59:b6:29:24:13:bd:45:85:26:65:d1:d7:8b:20:47:
                    6b:de:00:30:fc:fa:de:46:73:9d:8b:f0:0c:6f:16:
                    e7:6b:04:99:2c:c5:3f:3c:80:29:4c:62:6e:c4:c8:
                    39:10:57:58:ce:a1:73:96:c8:c9:5c:b7:f2:1b:d6:
                    63:ce:3f:18:a2:03:4e:35:99:a2:69:56:cc:48:eb:
                    8e:7e:59:78:a5:8e:cb:fe:f8:be:c9:2b:2d:35:ab:
                    81:52:3e:32:cd:9b:37:3f:c2:11:85:83:94:70:a4:
                    4f:5d:4f:ca:e3:61:84:93:3f:b2:c6:e5:8d:25:51:
                    e4:9e:78:b3:77:90:16:22:9a:54:8f:08:07:b8:4c:
                    f3:8e:ca:04:68:b9:5e:b6:f9:02:e5:76:0c:6c:e0:
                    d7:6e:a3:aa:3d:7a:2b:3a:ef:6a:83:83:f0:d4:c3:
                    2d:37:b1:32:68:13:03:c1:ce:11:bb:bf:50:90:78:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:5F:55:04:D0:D5:9B:54:DC:80:BC:38:7E:15:3F:0F:F7:2D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/311c905c-c74a-3300-b053-5abc79b4a61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a7:1e:e8:fe:fc:4f:7b:d9:13:0b:e8:26:7e:d8:0b:ad:02:
         e9:ef:c2:82:19:cb:cb:b5:f9:bd:63:67:32:00:0c:40:09:d1:
         d6:f3:50:b3:57:fa:05:71:a1:79:a3:9c:94:5f:37:c3:8d:58:
         60:06:7c:56:c6:d3:c4:06:8b:3d:5d:31:ef:68:69:fc:da:40:
         5b:6b:dd:fb:86:c7:b6:62:65:ff:b1:ad:6a:5a:89:7f:23:0e:
         54:b2:41:e6:9e:6b:87:d9:8b:cf:da:2e:8c:4d:bf:d6:ea:3e:
         00:f9:ee:07:27:41:f9:f3:64:62:fa:75:cb:f0:de:a0:fa:9d:
         2d:fb:8c:e2:e7:48:df:49:71:22:45:03:08:3d:40:01:38:8c:
         bd:64:6c:6a:12:da:4d:75:01:58:fe:f7:0c:a0:49:13:57:c3:
         52:89:5b:8f:2a:67:5f:fd:21:84:b3:ec:a4:68:3f:53:c6:83:
         08:30:0b:df:71:bf:7f:6b:96:d1:4f:e9:f5:b7:d7:26:be:f2:
         78:65:2b:e1:1a:e7:3c:f6:69:69:72:26:03:bd:35:a3:e3:c4:
         d2:70:c8:6a:c0:2c:f9:9d:71:ee:17:34:5a:fe:3e:0e:4e:3c:
         c8:cc:08:c0:c5:3c:fd:08:77:3f:8d:c9:67:e0:42:42:58:e8:
         61:ab:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:37:32 2025 by rpki-client