Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6110eba-24c5-32b3-aa63-581dfc3bbbd7.roa
File:                     e6110eba-24c5-32b3-aa63-581dfc3bbbd7.roa (raw, json)
Hash identifier:          A3+29PoykzX0ld1iOHTDQzexa2XTePAxjO5jgGrwr8M=
Subject key identifier:   4E:D1:6E:B3:2B:CF:57:74:0E:E1:C6:6D:91:E9:FD:C7:2E:5B:E7:37
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A47288194E3B76507E565C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6110eba-24c5-32b3-aa63-581dfc3bbbd7.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        204.104.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:28:81:94:e3:b7:65:07:e5:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=4d9fa6c6-38e8-499c-870e-045edbb00969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:c8:0a:b4:fd:dd:40:73:0a:31:62:86:88:
                    e3:c0:8e:e0:67:8c:71:be:e7:2c:df:13:0e:8d:44:
                    78:b4:5c:ab:7b:43:f5:44:f6:00:30:ad:c3:b3:59:
                    47:7e:71:49:2e:ba:b9:6d:19:d2:70:36:64:fe:0d:
                    10:af:dc:97:7d:84:a1:08:f4:66:48:61:4d:98:a1:
                    b7:47:ff:5b:6f:55:cd:82:03:af:ba:b8:71:b3:66:
                    df:17:92:5f:b4:bd:8f:39:63:66:a8:ae:b1:9f:4c:
                    7a:e8:7b:5d:f9:da:61:83:b4:f4:1a:20:64:d0:59:
                    75:f9:14:7d:db:bf:eb:d4:e2:16:8e:17:cd:41:85:
                    31:e0:ca:07:28:8d:70:24:73:aa:c1:a6:71:01:d4:
                    f4:7c:a8:2a:8a:41:0d:1c:f5:ea:69:ed:53:8f:cf:
                    60:cb:bb:eb:24:4b:ec:c9:fb:b7:7f:62:ba:2d:c8:
                    d2:13:21:e0:fb:8a:c3:dc:22:2c:e0:93:c9:3a:57:
                    33:c7:22:ca:b6:ed:36:6c:83:b1:e8:99:f5:47:67:
                    b4:b0:f6:b6:99:bb:a5:e1:54:ff:9e:85:a1:e3:70:
                    83:23:34:9c:86:55:c5:01:ee:75:2b:94:b4:9d:70:
                    50:16:53:a0:64:06:e9:df:16:39:72:9c:e8:83:5a:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:6E:B3:2B:CF:57:74:0E:E1:C6:6D:91:E9:FD:C7:2E:5B:E7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6110eba-24c5-32b3-aa63-581dfc3bbbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:96:20:59:1a:e8:80:6d:f7:fd:03:f4:26:e5:e5:83:4f:
         3d:85:2f:8d:9a:53:a9:b2:ee:49:58:fd:55:ff:1b:e9:d8:94:
         c6:6f:80:38:ff:b1:dc:e5:70:f6:6a:a4:4a:91:bf:5e:29:fa:
         f0:42:01:34:e4:26:ae:75:9e:0a:87:0b:b3:9f:c0:cb:ad:81:
         3f:a6:fe:0f:23:35:04:ea:2c:3f:25:7e:86:0f:5d:8b:a1:fe:
         6e:0a:f9:e4:49:8d:cb:d2:92:99:de:41:71:4c:45:c8:41:4b:
         a9:d8:23:58:f1:5d:2d:81:24:71:58:47:f7:78:90:7e:91:ae:
         47:e8:eb:a6:6a:37:f1:84:99:bd:bc:d4:2d:a4:50:38:1b:29:
         bc:86:e4:66:cb:65:df:cf:97:40:b2:49:7d:41:1c:20:18:32:
         04:4b:13:76:e7:a7:46:8e:0f:12:da:e2:44:f5:f5:cb:8d:6e:
         34:51:99:a4:86:d0:7a:35:ff:d3:67:ff:54:9b:00:d4:5b:ba:
         37:d4:d7:7f:63:35:94:89:6b:29:88:a1:8f:2f:83:5b:83:1d:
         1d:09:2e:a2:c8:8d:d8:16:61:b1:bf:49:c6:28:08:b8:78:fd:
         f7:1a:5d:69:89:a7:fe:3e:f6:2b:7f:d8:b3:3e:70:ee:ee:71:
         be:99:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:15 2025 by rpki-client