Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dd8f89d-8579-3b21-bd29-c18fc7188aa1.roa
File:                     9dd8f89d-8579-3b21-bd29-c18fc7188aa1.roa (raw, json)
Hash identifier:          3WBZtMSD5EJGX1DxOZH/+JHbtEb4oWFLsgZm7RuvYrM=
Subject key identifier:   40:E6:A6:C7:D5:57:B0:BC:4E:A1:51:22:07:2A:57:A2:E2:CC:BA:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE113C65F6D8EB30C4FA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dd8f89d-8579-3b21-bd29-c18fc7188aa1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        173.255.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:11:3c:65:f6:d8:eb:30:c4:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f895cd2d-53cf-4fb8-a094-3a07af965d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:a5:29:71:18:5e:24:d8:d2:e8:6c:53:1d:
                    00:5b:18:ab:77:49:27:8d:c2:11:5d:93:a1:00:6e:
                    fb:d6:eb:c7:22:a2:c5:ea:20:21:6b:df:41:23:6f:
                    6f:38:62:fa:54:3a:df:bd:3b:3d:f5:b0:a7:44:8a:
                    25:a9:5a:f7:08:4c:83:1b:d5:09:f6:29:1a:7d:66:
                    2a:6d:3f:a2:fd:63:39:88:ee:94:d2:f7:83:3b:b3:
                    36:bd:66:cb:e1:99:aa:e5:0c:56:a5:86:8a:35:bc:
                    ba:d7:84:40:2b:dd:a8:a9:a1:7a:e7:92:de:82:97:
                    96:26:c4:86:cb:73:2e:55:f9:89:fe:5e:ba:48:6d:
                    60:8a:d4:2b:0e:c5:b8:28:46:cb:47:8f:77:b9:1c:
                    78:66:59:51:b1:3e:a9:09:0f:5c:c4:26:c2:7a:29:
                    e5:41:22:b5:de:84:d8:79:0b:b3:6d:b9:47:c6:bf:
                    d3:3f:f8:60:44:c0:81:f9:b4:58:1c:2c:5e:0b:45:
                    34:5d:f9:91:a7:90:f0:05:80:3d:16:cc:99:2c:f7:
                    11:cd:a7:d0:1d:27:55:3b:dd:d7:5a:cf:a5:78:f9:
                    75:0b:03:c5:40:01:57:26:4b:39:b2:a4:1e:87:83:
                    b2:c8:d3:ef:a9:54:5e:a4:94:5e:35:3e:c5:43:c9:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:A6:C7:D5:57:B0:BC:4E:A1:51:22:07:2A:57:A2:E2:CC:BA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dd8f89d-8579-3b21-bd29-c18fc7188aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:3a:e1:d1:dc:3e:f9:0d:02:fc:0c:29:f0:6f:61:fb:10:
         de:ad:a6:4f:59:54:e1:ec:3e:48:c4:35:7e:d1:64:f9:17:9b:
         95:dd:0e:e8:e7:5c:49:a5:80:bc:c6:36:db:26:e0:74:ca:4a:
         dd:c1:df:6e:93:8f:55:f4:02:34:0c:e8:c8:76:c3:fe:a7:bd:
         88:8b:e0:13:af:8a:22:4d:bb:8a:60:63:78:fa:d0:35:ab:ab:
         f3:10:38:0d:18:e6:51:0a:43:a1:79:f6:1d:34:a5:f6:87:65:
         8f:d0:c2:42:67:24:4e:75:c4:12:56:a0:6d:d8:05:ee:da:96:
         0a:3a:56:61:b6:53:0b:f6:8d:30:a6:e4:83:fc:0f:61:e6:a5:
         e2:6d:f7:d3:78:aa:64:c9:c7:30:c1:13:ea:7d:ee:b6:3f:2f:
         c6:3b:c2:68:43:ff:3d:f3:ae:0b:6a:e0:fe:27:7e:ff:e1:b1:
         9c:e7:0f:b3:d1:13:b3:47:b9:9e:93:43:ff:78:7e:a3:ff:3e:
         b1:83:67:94:4f:aa:15:ea:0c:c2:7a:eb:5b:7f:2f:ff:77:75:
         2b:13:a1:d8:03:15:7d:d3:ca:e9:7d:51:1c:3f:b7:2d:73:90:
         79:8e:fd:49:6d:05:99:3a:0f:fd:d4:f1:5b:8d:c4:f1:d7:62:
         73:e9:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:30 2025 by rpki-client