Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
File:                     2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa (raw, json)
Hash identifier:          ddfgyt5NqLbGSPW9usg4C2N1XfiK5FuHUe0CBu3EUmc=
Subject key identifier:   66:78:DA:24:F0:6B:A0:34:DF:06:AC:7A:7C:80:DF:E4:C0:AB:47:1E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B5DD1E4934372B97D9F5FE400
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     262287
IP address blocks:        198.145.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e4:93:43:72:b9:7d:9f:5f:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=874af2f4-e5fc-4bbc-9490-6bdcf4c042ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:81:ac:5c:a9:6f:a9:25:58:cc:59:04:34:
                    05:85:c6:54:f7:4e:11:34:18:6f:6c:0b:d5:41:cf:
                    c0:90:e4:d2:4b:d0:8a:20:75:89:c1:1e:55:10:5d:
                    1e:20:2e:90:cd:a6:b2:e5:73:50:ba:cf:7f:85:85:
                    40:59:0f:94:5d:1f:55:19:9a:17:a6:b5:a9:d4:61:
                    64:05:14:f4:44:47:c4:02:2c:43:c6:80:82:4e:c0:
                    8b:dc:04:4d:a2:e6:5b:1f:7d:55:f9:fe:db:33:a7:
                    0b:d6:bd:f8:44:30:74:2b:b7:1b:2a:f3:a5:63:c7:
                    92:0c:17:68:fe:ba:90:84:73:9c:ae:b6:61:09:7c:
                    aa:31:1f:96:5d:7a:f7:32:7a:22:da:e8:33:b4:42:
                    0a:49:fd:21:b1:ff:b2:88:d1:5b:0b:d9:26:ae:17:
                    57:04:1d:64:62:7e:b0:c5:43:e1:f6:1f:70:d0:73:
                    22:42:18:15:a7:05:c5:cd:ed:9e:cf:23:18:8a:ce:
                    6f:fe:82:29:25:00:4d:33:33:66:7a:4c:e9:1c:a9:
                    79:25:9c:11:4f:ba:2f:cd:de:5b:b3:60:d4:61:ee:
                    9a:f5:bb:34:04:c3:08:72:9f:48:dd:2b:d3:f4:09:
                    a8:42:f1:18:68:df:b3:4c:f5:55:76:47:c0:1c:c1:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:DA:24:F0:6B:A0:34:DF:06:AC:7A:7C:80:DF:E4:C0:AB:47:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2d5f0848-825c-31ef-8675-f8f26b20e4fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:f7:18:29:f6:2d:29:14:6d:41:ec:c6:0c:38:21:2d:d7:
         02:4c:33:86:e4:f6:70:79:af:80:24:88:f0:1b:8c:9e:98:4c:
         55:cf:1b:2f:cc:22:83:ff:45:9b:67:1d:00:b0:19:4b:39:9a:
         e8:be:0e:de:4c:c6:07:3c:9b:dc:99:11:ab:bc:98:a8:eb:a5:
         40:59:32:6c:7a:82:1d:1a:b9:25:fa:03:5c:24:50:66:e4:b0:
         17:96:92:e5:96:7e:4a:4a:4d:df:b3:81:f8:2a:03:ba:f0:50:
         f5:2e:71:b3:54:f1:3e:bc:b8:c8:38:3a:c7:a6:f9:3a:e1:0f:
         50:20:b0:54:3e:91:03:cf:50:26:6b:2a:99:b9:3e:4a:7b:5a:
         2b:96:96:f5:d4:60:3f:ce:9a:13:ae:6c:80:c2:de:05:61:3b:
         98:cc:5a:0f:3d:e4:4d:81:bb:ff:bf:51:cb:f4:ae:b4:37:65:
         64:d3:10:18:36:f2:de:fb:f2:15:59:89:a8:a3:ab:10:a6:11:
         cd:ae:59:55:34:19:e5:6b:fb:a8:e0:3b:e7:47:35:d5:64:e6:
         9b:f3:80:fd:a9:ee:79:dc:c7:3f:96:66:d0:b5:41:9d:7d:fb:
         a3:35:1a:1d:72:e8:14:8a:6b:e2:21:29:17:3d:7e:6f:6c:fd:
         15:b4:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:48 2025 by rpki-client