Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa
File:                     37f8d8e7-379c-3629-aa65-e663dcf60a90.roa (raw, json)
Hash identifier:          h1QnjRf66ZV6W1f2bU+BSM27GpzzykHwzDB5vB+ytJc=
Subject key identifier:   F8:4F:63:87:60:5D:F5:3B:A5:08:59:E7:42:D9:57:CA:33:57:4A:E4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8BE23EABBB2AA1994F65F320
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     29798
IP address blocks:        173.46.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3e:ab:bb:2a:a1:99:4f:65:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=736cd26e-62c5-41fc-8627-0f543bac5cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:93:d1:35:8b:2d:db:26:03:8b:da:e0:67:
                    9f:bb:9a:d3:ad:11:18:ba:01:ce:15:1f:94:c7:f1:
                    c9:b6:c9:07:f4:3f:a2:45:c6:10:c1:e0:88:00:41:
                    84:c8:7d:28:0f:ab:6e:a0:91:3e:69:90:d5:ef:f3:
                    b6:3e:29:f1:c0:ae:49:c2:5e:88:86:07:d4:b2:60:
                    2c:14:3c:b4:c3:1f:f8:6e:6b:af:3a:fa:0c:af:0e:
                    40:d5:ef:cc:db:f9:bf:fd:4e:c3:fa:1c:e4:65:f3:
                    d2:cd:01:da:87:26:7b:f8:ed:84:6f:35:b6:3e:3f:
                    e5:67:02:56:17:2f:86:dd:54:d7:b5:65:29:54:41:
                    b5:07:01:65:74:72:5d:5a:d9:8e:ce:b0:8c:73:12:
                    2c:62:b5:27:0b:8a:c5:46:4c:40:78:eb:38:4e:5b:
                    03:ba:e0:cf:1e:a1:0e:13:d9:90:4a:9b:1b:69:44:
                    38:20:67:1e:fa:64:35:2b:8a:4a:d9:0b:fe:b5:46:
                    a1:86:36:0d:1d:3f:cc:02:9a:b3:c7:a2:59:24:ad:
                    b1:f0:46:2c:b0:5f:b3:d2:e4:8d:c2:80:b6:b3:c4:
                    5b:b9:42:0e:14:a2:4c:8b:4d:f7:6d:f7:e4:37:15:
                    6f:2f:8b:49:a0:e9:ec:4d:b0:f8:f2:62:3f:44:6a:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:63:87:60:5D:F5:3B:A5:08:59:E7:42:D9:57:CA:33:57:4A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:c8:1e:1f:86:4d:84:da:ed:97:ed:8f:98:7c:0a:7f:13:
         95:0a:cd:71:c8:91:33:29:53:3d:95:5b:8d:4e:1a:3f:b0:a5:
         30:fd:ea:01:8d:f4:7c:42:50:07:47:71:e0:ca:62:25:9a:b8:
         57:77:74:f0:54:ce:06:aa:12:5a:e2:26:bf:16:00:fb:2a:5e:
         a4:8f:56:db:85:03:69:4d:21:cc:ab:ab:17:9b:bd:01:1c:6e:
         d6:cc:c8:bf:df:0b:a3:ba:ae:30:14:71:55:d9:9b:e8:1c:3b:
         d1:cb:d1:ad:fa:e0:5b:d9:93:fe:f8:79:87:36:3b:69:93:d0:
         68:c1:e2:46:ed:a6:d5:51:17:78:a1:07:8f:e5:d9:96:f9:5e:
         b2:73:b9:0e:ac:b4:14:a2:ec:66:e5:a3:a7:4c:a5:a5:f1:9e:
         37:e9:85:bf:1a:d6:3d:7c:2e:9e:74:f2:96:02:66:7d:2f:ba:
         a4:b9:f4:90:76:a1:ba:dc:e2:ff:3a:d7:cd:f9:b6:79:77:d2:
         c0:7c:26:d0:81:b3:b6:e6:b4:0c:c0:14:89:c9:56:22:b3:a7:
         4d:d6:56:a1:f7:b1:c2:72:49:54:92:d2:94:79:c6:1d:b0:22:
         c5:9c:04:1f:f3:ed:4a:13:b9:85:49:79:49:f8:b1:85:29:7a:
         49:b8:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:58 2025 by rpki-client