Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
File:                     123983f4-735a-3daa-866c-0058ff4204c9.roa (raw, json)
Hash identifier:          CtB/VnUh58YVql9lHXDOOy/o4O51uXV1H8+jwVGAsoQ=
Subject key identifier:   E5:45:43:91:41:60:58:38:F1:E6:31:32:BE:08:B9:BA:F0:5C:67:EC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52173349182BA58C1C42A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     17359
IP address blocks:        199.255.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:17:33:49:18:2b:a5:8c:1c:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d459c516-2126-45d3-ad1b-c390cae213ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:2a:f3:0d:c7:87:2c:62:42:14:5a:fc:85:
                    14:e1:90:4e:28:44:13:3d:f1:12:c2:63:d4:f9:bd:
                    9d:b0:2a:f7:b5:51:50:bf:69:d0:06:76:b8:99:a5:
                    3c:40:00:a5:fc:71:0a:05:3b:a6:e8:b3:00:37:e5:
                    5c:db:ef:dd:ea:13:b7:43:21:a4:eb:6d:7c:53:cf:
                    17:93:df:86:a3:23:ae:50:e7:c4:6c:b2:0f:06:5d:
                    bd:6f:cb:cd:f5:12:16:be:cd:d9:af:96:47:21:b1:
                    48:35:80:fc:16:48:4a:04:97:f5:d0:cd:8e:8f:9e:
                    ec:52:48:90:6b:2b:83:45:2d:20:81:3c:2a:71:2b:
                    c0:15:f7:de:32:6c:25:d5:25:19:37:f1:ef:d1:80:
                    ab:df:1f:8d:04:97:b3:5d:fb:7d:60:f0:3e:c7:7d:
                    af:25:8f:40:60:de:3a:6f:b9:08:a9:0a:20:75:50:
                    c2:0a:bd:9f:41:d5:d7:04:ed:39:f7:c6:be:ff:78:
                    55:d1:44:7b:ba:e2:f2:18:e2:75:55:6f:24:55:d5:
                    b4:7e:3b:2e:7e:3c:81:43:95:a7:65:d8:40:8c:6a:
                    a3:91:e3:18:ae:de:8e:b3:56:4e:30:b4:75:99:56:
                    23:9e:eb:9a:e9:5a:02:77:ab:e2:fb:4b:00:b1:0e:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:43:91:41:60:58:38:F1:E6:31:32:BE:08:B9:BA:F0:5C:67:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/123983f4-735a-3daa-866c-0058ff4204c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:8b:55:d1:e4:a7:de:b1:57:c0:1b:ae:e0:21:b7:23:d6:
         05:72:51:f4:ee:2d:59:d9:be:22:8f:46:eb:7c:19:e9:f8:aa:
         2e:41:e0:d6:6a:9b:64:02:61:77:c2:79:49:37:41:1f:61:e9:
         02:b9:a4:a9:95:23:ed:99:ec:30:7e:98:83:7c:f7:58:45:f4:
         4e:ae:ed:4d:a6:56:9a:70:be:9c:29:5c:49:01:a9:48:95:f8:
         7a:cc:3f:41:a1:4b:82:fa:ba:b5:26:09:9d:5e:5a:67:b9:8e:
         b0:76:2a:2a:09:9d:4b:e3:56:ca:48:1d:5d:8b:8e:a3:fe:55:
         68:10:5e:a8:2a:ad:28:75:0e:7b:08:5a:56:57:70:e8:15:d1:
         ff:6d:b9:7e:4a:20:4a:e1:83:98:d0:ae:3c:47:a5:57:40:11:
         ce:d4:68:28:5a:da:65:66:44:44:04:fa:76:c9:d9:9d:3a:ce:
         2f:b3:1b:78:fe:a9:60:d1:54:ab:f6:95:79:75:a2:22:2b:ed:
         72:2c:1b:db:6c:28:bb:8b:cc:3c:fe:6c:fe:82:a0:d7:ef:63:
         7b:e9:ef:53:91:76:c9:0c:e1:7d:d1:2b:50:d7:47:25:01:09:
         6f:1b:47:8a:8f:c0:91:f9:32:da:7b:f4:34:d1:71:80:65:55:
         55:8e:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:05 2025 by rpki-client