Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e280ee26-26cb-34a5-9468-324a5fd22d5a.roa
File:                     e280ee26-26cb-34a5-9468-324a5fd22d5a.roa (raw, json)
Hash identifier:          fLtLpM85t68n8WL3/bIbPxWsj7UR57ZNx8VBoGgFlT4=
Subject key identifier:   9E:55:A6:2E:D2:A3:61:6C:2B:BD:47:75:A0:30:97:0D:2C:5E:AC:7E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5241A8F6ED7C2364A29CC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e280ee26-26cb-34a5-9468-324a5fd22d5a.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     17359
IP address blocks:        208.92.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:41:a8:f6:ed:7c:23:64:a2:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=9d1c1fa5-3c06-461d-82c3-5affa0725c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:fa:a6:e9:d3:0c:3a:5c:d3:c4:bc:2a:00:
                    02:dd:10:19:8a:1f:aa:bf:ca:90:86:ef:b9:0d:46:
                    dc:4b:d7:73:d7:88:a4:52:03:27:ed:94:82:cf:c5:
                    8b:1c:12:d5:dd:6f:b0:ec:5b:76:f7:9f:8b:34:06:
                    14:5f:f7:65:6a:95:e2:97:c0:f0:50:ac:09:93:69:
                    62:1a:48:dd:1a:83:16:d5:53:17:99:35:84:e2:4e:
                    06:51:bf:71:78:24:d1:49:2b:7b:61:89:0e:20:d8:
                    85:05:ec:0f:f5:26:df:fd:1b:e8:e7:a5:06:37:0a:
                    38:f5:63:fd:56:18:2f:c4:9c:30:7e:3b:fa:b6:7b:
                    da:04:6d:11:e8:14:5d:76:9f:7d:7f:a7:b7:d7:10:
                    2e:d0:04:22:27:84:1f:00:f4:26:45:2e:29:60:b9:
                    55:0e:a1:f2:d5:ba:94:71:76:3f:0b:32:ba:3f:a7:
                    ac:9e:8f:0f:c5:e3:9c:17:e7:ec:d6:02:3d:a1:d2:
                    c1:02:3d:a1:e7:07:81:a4:d6:59:5d:2c:07:df:60:
                    40:57:24:75:b0:21:b6:5a:be:ee:b1:fb:ff:e0:76:
                    2c:0b:de:28:3d:21:d2:36:02:87:18:09:4f:31:a0:
                    e4:9e:cf:70:6b:11:80:b2:8d:a5:02:d1:0d:a9:ab:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:55:A6:2E:D2:A3:61:6C:2B:BD:47:75:A0:30:97:0D:2C:5E:AC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e280ee26-26cb-34a5-9468-324a5fd22d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:50:df:bd:7c:2e:cc:d6:77:d6:4f:a7:5e:a0:98:97:93:3d:
         2c:00:ec:9f:13:c2:ca:c9:a5:97:7b:f2:66:d0:f0:07:c5:1e:
         b3:b6:57:ec:d3:d2:31:f8:00:39:7f:f1:f6:d6:b7:23:a8:f7:
         7b:12:6d:42:b6:2b:01:fa:ca:71:38:9e:eb:d9:81:cd:ec:95:
         70:56:d3:e7:4c:04:f0:4a:e4:cc:94:a0:a4:41:16:28:5c:16:
         30:b8:84:7b:66:0f:2b:76:94:ef:c8:00:46:10:0a:05:8d:de:
         51:3c:30:c6:a9:53:ba:18:29:c7:a5:7d:5e:09:f0:0f:70:d5:
         e1:a5:07:fe:a2:bb:bc:5b:46:60:69:be:1e:c1:dd:a9:b8:20:
         2d:85:e9:2b:f8:0e:ac:89:dd:1f:a0:7e:f1:07:c3:cd:04:66:
         34:80:d0:4b:5e:f6:5b:ae:e4:9c:3b:2a:9e:ad:14:f2:ad:9d:
         be:8d:ab:a9:5f:cd:03:21:6e:6d:8c:5d:6c:f4:09:f9:12:a8:
         ee:73:a0:64:3b:82:21:af:48:03:3a:92:34:c9:75:5b:0e:e4:
         b1:9c:c3:35:6c:33:b6:39:cf:48:aa:d3:9a:b6:d7:a0:30:67:
         8b:51:17:ca:8b:3e:28:46:75:91:ef:2c:65:d2:64:74:d2:bb:
         94:ae:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:48 2025 by rpki-client