Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa
File:                     0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa (raw, json)
Hash identifier:          hPGeTVi7oZXVxeBEXT5/+4i/LH8/TT7sA+yNXJTvQlE=
Subject key identifier:   35:03:2B:A9:C6:E4:75:C1:8C:23:94:3C:C1:C0:FC:B0:4E:65:4E:FD
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584B4E770CD46C2A56678FAD9C80
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     399883
IP address blocks:        104.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0c:d4:6c:2a:56:67:8f:ad:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=3d23b0d7-c811-446d-84aa-e5f120ea1ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:6f:b4:73:8a:54:21:d7:7b:cb:08:33:79:
                    f6:58:01:a9:50:63:d6:0f:05:c4:a4:a7:83:d8:d6:
                    34:5f:c0:b0:92:ad:0a:93:fe:03:e0:c5:28:3a:c1:
                    b6:0a:8b:ef:fd:3a:ff:92:bc:42:66:3b:90:29:28:
                    97:f6:c2:36:e4:c5:3e:86:6d:03:4a:81:b0:1a:04:
                    e4:e4:7b:a1:94:88:57:6b:8b:8e:4b:d7:a8:b7:ae:
                    de:56:b3:49:37:9c:eb:1d:ee:99:eb:4a:41:9b:bf:
                    88:d6:38:ea:ca:36:ef:20:4a:40:17:22:d3:37:6c:
                    53:db:35:3f:62:6f:56:1a:bd:16:5d:64:4b:c5:fd:
                    f2:76:84:ec:0c:dc:e8:2a:88:d7:4a:2e:48:cd:78:
                    bd:81:41:1b:93:1e:7a:c9:cc:6c:56:30:30:9c:a7:
                    48:55:76:10:82:0b:d5:2c:8b:93:e4:95:5b:cd:9e:
                    54:78:52:83:d4:5c:6e:2b:0f:b5:4a:3a:f8:5f:30:
                    ca:b0:16:da:d7:99:b7:69:29:84:4b:65:f5:9e:df:
                    ff:cf:d3:73:2c:f2:df:37:ee:34:a9:78:0f:4a:87:
                    25:51:21:a9:44:ea:8a:ba:a1:aa:2d:c8:1f:3c:62:
                    b3:21:34:e4:6d:b0:2f:b7:62:ec:b0:89:07:c7:93:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:2B:A9:C6:E4:75:C1:8C:23:94:3C:C1:C0:FC:B0:4E:65:4E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/0a6a1a50-3564-3d14-94a3-bc64a2fe8f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1a:c9:7c:10:10:fb:36:f9:38:6d:d7:d6:b1:f2:96:65:00:
         31:a0:4f:bf:ac:c1:88:f7:0c:70:3c:0d:17:22:a7:bf:d8:1d:
         c0:84:4b:98:b3:b9:e2:cb:5f:8b:f2:16:73:6e:66:d7:f7:87:
         0e:00:87:bc:e8:fb:61:6f:55:6e:a0:84:b0:69:19:3e:33:5e:
         39:9b:5c:44:5c:c9:84:3c:51:16:3f:ca:d7:25:03:bd:c8:82:
         c9:c5:95:d4:ed:e0:6f:48:be:1e:46:12:d5:eb:70:2e:af:e7:
         28:b6:0d:06:ae:9f:f0:e2:1f:ba:27:ea:bb:be:7f:3d:68:e5:
         79:20:42:b9:38:91:5c:90:4b:81:d7:5e:1c:7f:1a:02:01:50:
         3d:8f:47:ec:68:cb:c4:2d:cd:40:58:86:d6:aa:6c:77:ff:e3:
         c9:67:d0:d8:00:88:5f:2e:0e:10:f4:c5:23:a1:f8:5e:17:82:
         f6:eb:e6:8b:83:fb:8d:6b:6a:ff:a9:1b:24:0c:f1:95:3c:23:
         28:40:a2:83:c3:5b:54:9f:d4:aa:a6:3f:75:b0:fe:76:fb:b4:
         d2:3b:56:51:9c:ad:d2:c0:a9:c7:2b:94:b6:23:07:10:2b:b9:
         1f:a6:71:cc:6e:8c:eb:d7:0f:1c:e4:90:5c:9f:85:d3:db:85:
         fa:6d:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:42 2025 by rpki-client