Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
File:                     63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa (raw, json)
Hash identifier:          isP5bECIoCJg8/noYMturnhkWVeW5lq+JFNQoE2CfEs=
Subject key identifier:   CA:34:0D:A2:88:0F:DF:43:35:18:41:4F:81:50:47:F3:93:AD:ED:D2
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B5F374B378DABC2CA812BDC80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        104.237.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:4b:37:8d:ab:c2:ca:81:2b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=b1b3fc79-5f97-48c8-913a-fb2b7821f5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:d2:18:1e:ba:79:f7:90:29:a9:2e:23:00:
                    b3:e6:29:52:4b:ce:9a:30:56:8b:67:5c:d7:fd:90:
                    d6:e8:97:4e:8a:1e:cb:54:78:ff:2b:95:e0:df:33:
                    ca:af:ba:61:f6:5c:d5:43:5b:68:38:ea:95:c1:f0:
                    45:23:37:14:4f:90:57:c2:91:8e:c8:e6:83:65:bf:
                    5b:4a:ef:c8:7d:ae:fd:2f:dc:e9:90:f6:ca:c8:fe:
                    d1:71:85:14:9d:25:1d:7e:7f:fb:25:00:11:f1:74:
                    de:5c:20:8a:f8:b7:12:ed:7e:25:9e:7e:b9:74:78:
                    3f:d3:74:87:ad:d2:11:90:d4:84:84:3d:54:fa:dc:
                    25:b7:bf:08:32:b4:42:d8:b2:ae:58:0b:02:15:8d:
                    98:6d:99:c5:91:16:dd:61:05:58:ec:c6:dd:bc:9c:
                    0a:55:92:05:56:cf:ff:21:f7:07:79:f0:0d:e1:75:
                    c1:41:2c:a7:0f:62:41:e0:0c:2a:0c:e5:f7:ad:ac:
                    d6:47:cb:67:8e:8a:76:10:c4:0d:51:71:fc:f8:01:
                    9c:1f:b7:29:39:86:7c:8b:85:30:86:1f:61:87:13:
                    c4:c8:b8:53:e2:c5:ce:c5:4f:a6:30:26:ad:c6:cb:
                    5a:fc:f2:51:b5:31:36:2b:c8:51:84:34:b8:d8:01:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:0D:A2:88:0F:DF:43:35:18:41:4F:81:50:47:F3:93:AD:ED:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/63cce5d0-64e4-3e46-9b21-30bb6e0f13b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:77:66:e3:35:c9:8b:c1:96:f0:b3:a0:f4:a8:ec:35:2d:
         bf:0e:9c:2a:a1:a1:b1:3a:d6:aa:0f:2e:f4:16:e1:5a:79:10:
         8b:b1:96:94:7e:e5:b7:0c:2d:76:c8:ca:c2:33:8c:d4:6b:db:
         b0:bf:f6:1b:8c:c0:8c:29:ad:86:45:02:08:0a:63:65:10:35:
         cb:c5:da:7e:c9:1b:6c:8d:b1:2d:f9:fb:76:8f:2f:8a:3c:85:
         0a:08:fd:a5:c6:ae:2c:73:c9:1d:4a:90:bc:1c:fd:c1:9d:2b:
         df:37:62:1b:44:1a:6b:3a:a8:fe:9e:f7:0c:d5:28:d6:85:a7:
         52:4e:32:74:07:6f:79:b8:6d:74:36:9b:36:24:5c:c7:89:a9:
         ad:5d:92:05:5d:d4:9a:a3:bd:7b:d7:44:5d:a2:48:66:a7:2c:
         c0:65:2d:89:84:11:6a:c6:44:9e:f7:87:ef:62:bf:04:48:d8:
         22:c6:cd:8b:28:f9:72:ce:63:94:e5:6e:fd:88:f2:09:0a:5e:
         25:11:c9:11:93:46:37:2f:d4:65:ea:7f:63:94:cd:4e:0e:87:
         a4:46:f3:40:d7:97:43:53:8c:90:72:d6:4a:d8:0c:fd:71:a4:
         74:53:f4:12:de:01:ec:a8:00:12:f9:15:65:69:39:66:51:6a:
         3d:d7:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:19 2025 by rpki-client