Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
File:                     7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa (raw, json)
Hash identifier:          vKJxlNZRqcl3MR2RxlUFZWrY3io+1aGmMGUmsN7YNTw=
Subject key identifier:   ED:D9:07:04:68:59:51:7E:3A:C9:5B:F6:FD:AB:3D:8C:8B:56:E6:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5241F6833BC92861AEC580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     17359
IP address blocks:        199.200.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:41:f6:83:3b:c9:28:61:ae:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=2f182623-30cb-4ac0-8179-3a999b0bcb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:2e:92:18:e7:df:66:ab:b4:77:74:eb:a9:
                    cd:4b:94:df:16:71:5d:84:85:3c:cb:61:30:43:fb:
                    bd:42:37:42:83:40:bb:9d:c1:bb:22:0d:98:16:14:
                    c6:d8:64:d6:37:3d:0f:e8:18:86:7a:37:5d:8d:78:
                    75:c5:03:ba:76:ee:f2:0d:ee:f8:46:fb:62:d2:94:
                    eb:33:7c:d5:8d:62:ad:8d:e0:33:88:73:ea:ae:62:
                    47:c2:17:9b:7d:07:06:32:c6:65:d4:b0:2a:23:09:
                    89:17:f5:28:8a:5d:e8:42:22:00:b0:34:7d:ae:22:
                    6a:03:03:1e:75:84:d1:dd:24:82:82:9c:03:fa:2a:
                    ae:b1:4d:25:f2:1d:82:65:d6:fa:5a:e7:dc:e7:a8:
                    65:ed:3c:62:a5:f2:09:d1:aa:23:30:8f:38:d2:1c:
                    7e:44:f9:e2:37:71:f5:80:fa:d7:4b:16:b9:aa:25:
                    08:bd:14:20:6f:bf:49:99:c7:61:df:d9:c5:61:dd:
                    c6:e0:ed:b1:af:6d:cd:5f:73:94:4b:fb:e2:a8:65:
                    3c:c4:17:23:39:06:06:ac:6e:55:da:f4:70:c0:ad:
                    c6:51:6f:47:88:f1:a4:b8:03:14:9f:b6:b1:33:ee:
                    49:69:2c:65:28:31:87:5f:91:df:ae:7f:e8:f6:d8:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:07:04:68:59:51:7E:3A:C9:5B:F6:FD:AB:3D:8C:8B:56:E6:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:9a:d5:27:35:45:8a:35:b0:c1:39:43:94:af:36:b0:ec:
         89:72:6b:48:5e:f8:cd:1a:0c:c2:16:7d:ff:ff:61:93:ef:d2:
         71:32:f1:d4:76:33:62:ea:0e:db:fe:c8:47:6a:22:7f:81:f9:
         c9:22:79:8f:ae:b2:9d:19:54:73:92:a0:e0:a0:5e:22:00:5a:
         1d:01:28:23:09:ea:6e:81:a3:c5:13:fc:c3:3f:99:84:40:ac:
         2c:f8:42:34:7b:6c:4e:44:30:f2:61:73:da:2d:eb:4c:93:d3:
         4d:31:32:f5:97:f2:71:7a:f9:e1:6a:d0:c8:1a:61:18:c4:6d:
         8f:36:50:aa:9f:25:06:03:d0:56:92:34:ff:d6:64:e0:c7:71:
         5b:19:5c:75:b6:83:f4:e0:f0:a7:87:43:06:48:8e:cb:86:c2:
         62:18:91:60:c5:19:c5:64:b0:69:3a:cd:1f:dc:6f:46:11:58:
         12:fe:3b:d1:29:52:63:52:9a:80:86:34:d6:39:13:c9:21:c1:
         06:5e:ca:41:bd:db:b5:10:30:4b:b8:08:07:a9:55:03:8a:70:
         a6:9f:3b:56:21:09:2e:61:8d:86:ef:43:d9:0c:9c:63:b6:d9:
         00:f1:e0:9a:26:8c:63:8e:b0:4d:0e:24:02:5a:c5:66:2a:72:
         6c:03:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:35 2025 by rpki-client