Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
File:                     933424d9-7724-3d56-928c-ad8645ab2fa2.roa (raw, json)
Hash identifier:          F2MK1K/VTuqpd+7K+se/fvZzyRpG3Vqo6UurUU6vc3k=
Subject key identifier:   47:F3:9D:2B:C6:53:E4:91:76:6B:21:46:9D:93:CA:FE:21:15:B5:84
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CE0CA03AB190C59678A6C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.117.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0c:a0:3a:b1:90:c5:96:78:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cebef6af-5b37-463e-aac5-1b94e23d9d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:f7:68:ec:ec:c9:ac:c8:49:fa:4a:3f:77:
                    0c:2e:cc:cf:77:f8:f6:d8:59:bf:64:b0:c3:8a:52:
                    c5:7f:a0:2f:f0:b8:6a:37:82:df:a0:1c:49:7a:d7:
                    38:b1:b0:c2:46:d0:54:21:37:04:c5:ce:a9:74:e1:
                    9d:d9:36:f1:33:7e:16:f6:fe:95:5e:81:de:70:55:
                    61:73:8b:55:c4:39:57:37:d4:96:8e:4e:8e:07:2a:
                    cb:71:d7:22:22:99:b1:8a:e3:29:dd:70:d1:ce:44:
                    be:29:ea:00:80:7d:8a:33:95:bc:e8:1b:df:d4:e5:
                    76:25:ea:56:30:d6:39:14:ec:a0:bb:9b:18:e4:6b:
                    c4:6b:e9:a9:95:69:d9:d8:f8:ad:23:cb:1e:9e:d4:
                    60:c4:fd:3f:81:c6:94:81:3b:f3:d3:fb:4d:c9:32:
                    92:a8:11:d7:0e:92:08:64:35:55:98:37:40:23:5e:
                    cc:93:c8:45:c8:5b:d1:7c:fc:b1:f4:14:1d:4a:94:
                    b3:5b:48:08:5f:ae:46:07:31:8b:02:96:47:8e:63:
                    ff:6e:d6:f4:dc:1a:bf:1c:1a:0b:a2:78:fb:dd:8a:
                    86:cf:57:b7:a0:af:49:b8:a6:a3:0c:73:ab:6a:4e:
                    ed:83:8b:87:d7:d0:28:36:0b:ca:d7:79:9b:f2:6b:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:9D:2B:C6:53:E4:91:76:6B:21:46:9D:93:CA:FE:21:15:B5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:b2:89:25:0c:82:4e:82:3e:f9:e8:b2:49:19:a8:84:51:
         4e:56:ba:e9:6b:a2:b7:91:e2:2e:ae:67:27:2d:49:f7:10:3a:
         03:74:53:31:33:f7:fc:3a:6c:3c:12:1e:a5:6b:cb:af:84:67:
         df:8d:6f:ae:82:8b:ec:a7:7b:cd:80:45:c3:a4:fe:1a:d7:f5:
         81:bb:ad:e4:14:b8:28:9c:33:7d:63:3a:c1:5e:b5:9e:cb:e7:
         d1:26:68:1a:0a:a4:31:25:bd:fd:cd:ef:b7:5e:e2:81:f1:5c:
         08:55:76:4d:f1:c9:bc:eb:de:9e:83:45:0a:f9:b3:c3:99:19:
         5c:90:2b:57:15:8b:a1:a9:b7:1c:bd:22:d9:e0:39:92:15:03:
         90:bb:a9:09:98:26:8d:74:c4:06:3f:8f:02:04:88:96:90:63:
         fe:46:bb:8e:69:fd:89:1f:4c:e8:33:45:04:82:de:a2:04:6c:
         07:e9:6a:5f:7c:47:95:96:f0:f7:b7:6f:44:48:c5:22:3d:25:
         58:87:2b:29:60:bd:93:c7:bb:e4:97:c9:64:d8:96:cf:4b:36:
         48:71:6b:ac:bd:38:9d:d1:ea:e5:b6:60:49:95:60:88:62:39:
         69:20:be:d9:c2:48:7c:f9:bf:8f:05:fc:48:7f:21:59:16:26:
         8f:80:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:49 2025 by rpki-client