Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          Yu0grxcZu5+llnbZMYZzf6QJ7dgC82YYgAWIzmtiWtU=
Subject key identifier:   89:F5:74:8B:6B:75:24:9C:F4:E8:00:C0:25:EA:8B:35:C5:1D:07:D7
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584B92DCF3C49074B3EDFFD90780
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f3:c4:90:74:b3:ed:ff:d9:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=f8e3da33-3a92-48ec-8907-a16d590d4aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:a4:a7:fd:07:5a:7b:f2:06:0d:78:1b:01:
                    a6:1c:31:7d:b3:01:82:91:ff:8b:ef:d0:40:d0:e1:
                    a8:4e:8f:55:8c:0f:99:24:87:24:d0:4a:c2:bf:5f:
                    05:b8:6a:a6:91:5b:c6:45:33:ea:98:db:42:a0:6d:
                    0a:33:52:04:36:6e:14:69:3f:ab:d4:9d:e2:d0:bf:
                    07:8e:21:65:9d:d4:1c:10:df:8e:c9:f5:c5:b7:9e:
                    02:5c:2c:0e:2b:8b:b7:1f:06:df:f6:cd:b5:01:29:
                    5b:59:2b:aa:a9:ed:7b:ce:ba:58:85:eb:a9:cd:f0:
                    22:91:78:56:1a:b3:11:f1:d4:9b:cd:7a:c7:5f:03:
                    f9:dc:07:d9:54:53:3e:f1:9d:fd:ba:69:bb:a2:7e:
                    ca:9b:b3:90:21:ea:a0:f8:04:73:0c:65:f8:11:7b:
                    6b:a9:8d:5e:9f:d3:c4:18:14:dc:45:69:1a:47:7e:
                    66:62:09:cb:c7:b5:3d:8d:16:12:89:10:4b:02:f3:
                    db:4b:43:be:07:69:a4:36:82:fb:3d:dd:18:b8:5b:
                    30:17:4f:4d:f1:26:9a:ff:b9:1b:fd:aa:3f:20:17:
                    13:84:12:b3:32:28:ec:c9:27:49:59:68:68:61:f7:
                    df:0b:81:79:6b:8c:bb:aa:1a:18:53:6e:be:58:11:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F5:74:8B:6B:75:24:9C:F4:E8:00:C0:25:EA:8B:35:C5:1D:07:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:a8:a7:28:6f:13:56:b7:a3:4b:19:e9:9c:78:95:a1:df:
         bb:56:59:ae:c1:8c:d6:4a:84:ed:84:90:fd:87:ad:89:7a:b1:
         bc:17:b2:3e:ba:fb:9a:56:cd:32:92:24:f2:32:02:74:70:6c:
         4c:b1:21:dc:cd:fc:b4:57:f4:2d:a2:58:cb:ff:c0:67:c7:37:
         ed:63:c9:bd:ee:ef:9c:d0:f2:d3:5e:7a:22:b6:c2:df:f9:0d:
         47:4e:42:32:04:5c:34:b8:f9:5c:87:16:96:47:13:9d:9f:20:
         26:6c:27:80:92:5d:00:9a:43:0f:f5:ef:58:ad:90:58:0a:5e:
         22:26:e7:4e:89:33:5f:d3:79:bf:54:c0:f9:fa:7d:ee:98:b4:
         1b:46:78:be:46:a7:87:5e:c1:61:9a:5d:d6:69:7e:e5:95:ae:
         8d:17:4f:27:91:7a:58:94:f0:a4:b5:8f:08:06:a9:84:0f:f6:
         77:68:05:cb:82:b5:e9:c2:d5:ac:15:eb:8b:99:24:94:76:ef:
         19:50:98:0b:c7:6b:6f:77:47:21:52:8f:2d:58:3b:6e:9b:62:
         88:b3:35:e4:1e:74:bf:26:a5:0f:29:40:4d:78:81:a7:7f:95:
         32:99:59:c3:62:24:e8:48:a4:52:19:ab:70:ad:9f:4e:87:9b:
         5e:f2:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:48 2025 by rpki-client