Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
File:                     03fb9d59-f422-365b-8c92-7177fbbec8bf.roa (raw, json)
Hash identifier:          U6LcEbxKrVi/ZiaP61YQ2v7RSrFs3+S6mBONPvpWKnI=
Subject key identifier:   DE:E8:A6:30:F8:8C:C5:56:B4:60:BC:03:DE:FC:D3:68:70:CB:C0:7D
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F4328584B8BE228B402DBEDF60501BF00
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     21700
IP address blocks:        209.151.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:28:b4:02:db:ed:f6:05:01:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=8567b2c7-ccb0-4876-b57a-130401d225ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:44:6e:6f:a4:33:6e:e5:dc:cf:26:e9:06:d5:
                    8c:9e:46:0d:d8:0f:eb:2b:e6:ba:a6:57:c9:4c:b0:
                    34:fb:db:46:29:cf:f1:5c:f4:6e:d8:f5:e1:3d:05:
                    a0:be:0e:39:5e:b5:f6:cb:fb:64:e2:21:79:c4:ee:
                    60:71:8d:43:59:d8:4f:e7:51:ec:c2:37:f3:e4:49:
                    2f:83:8e:ce:96:9a:cd:32:68:b6:ae:db:bf:87:2f:
                    5f:6c:aa:e8:95:a0:2c:31:82:ef:2a:11:d7:67:c9:
                    4b:00:8b:35:50:33:14:dc:7b:cd:e6:8b:fb:f4:b4:
                    a2:7d:e9:25:4c:29:fa:5b:52:dc:a6:bc:b8:45:18:
                    39:23:7e:69:aa:e6:8e:c7:c4:7a:86:3c:f7:87:d2:
                    5b:53:3a:04:4a:9d:23:04:69:b7:01:ff:57:24:1d:
                    87:5f:04:fb:dc:15:d4:1d:80:da:d0:5e:e3:1e:76:
                    17:d0:33:1a:e3:c7:79:a2:2c:9a:6d:4c:6b:89:a3:
                    a9:63:b5:c2:4a:12:9e:27:bf:2c:cf:39:51:08:2d:
                    54:1d:3d:56:73:7c:39:fb:6d:dd:60:99:ae:84:d7:
                    83:f5:72:c6:f2:aa:47:0c:2f:42:c4:c5:5c:4e:55:
                    70:b5:f3:3f:6c:4d:ac:11:8d:5d:75:00:6b:83:d0:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:A6:30:F8:8C:C5:56:B4:60:BC:03:DE:FC:D3:68:70:CB:C0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/03fb9d59-f422-365b-8c92-7177fbbec8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:11:e0:f2:9d:8d:58:e1:fb:ca:75:ac:e0:82:cf:51:d4:af:
         41:e9:7e:fe:04:82:b6:45:fb:69:d0:9a:18:96:c9:bd:16:75:
         55:e5:5a:c9:04:56:19:04:c5:91:2a:62:22:92:d7:61:b6:2a:
         b3:7f:3b:de:fa:7b:6e:c8:fd:1b:bd:9b:1a:4b:ec:2f:03:6c:
         0a:0f:be:1d:0b:3e:57:a8:b8:99:30:d9:d1:77:2d:92:71:f6:
         6d:da:87:58:cd:94:72:d8:69:50:a9:d4:d7:e8:c5:e4:f9:47:
         a9:04:1d:cb:82:e7:ec:cc:1d:82:69:62:55:63:a7:2d:53:8b:
         c4:dc:38:63:55:41:21:74:49:ea:eb:5e:68:88:bb:1f:73:96:
         f4:d2:47:a4:6a:84:b1:31:ba:55:e2:f4:3a:fa:4f:d7:40:5a:
         eb:8e:a3:70:9a:b7:74:1e:af:cc:10:63:66:e1:68:86:7f:b6:
         bb:78:83:48:c5:e5:16:23:8f:f8:ee:97:73:76:66:b6:a7:45:
         72:b1:3d:39:50:52:3b:f4:24:7b:15:54:fc:56:9a:74:5f:77:
         29:21:27:9a:92:a0:0e:88:4b:07:e5:8c:c7:1f:86:51:9a:0c:
         44:74:cb:4c:70:8e:70:85:d5:16:43:17:cd:40:7c:6e:1f:a2:
         5e:29:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:43 2025 by rpki-client