Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa
File:                     f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa (raw, json)
Hash identifier:          yC7ArS9vluwAxWgYlpb9axxPqlMwl0hZ/sUUzR3AcyA=
Subject key identifier:   32:04:21:99:87:18:D5:0E:67:0F:7C:DF:EF:FF:2C:6D:EB:8C:E9:F9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B59A1C936B33DD3D80A7D9E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     3356
IP address blocks:        170.30.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c9:36:b3:3d:d3:d8:0a:7d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=d52b454f-39e3-4dab-a8c2-3e86b14b03b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:d3:c5:d1:a8:99:ad:5f:d6:14:d9:3f:66:
                    5c:81:f7:2d:be:58:94:39:40:59:c0:9b:8c:59:df:
                    70:0c:d1:48:43:b0:17:e0:64:14:34:6c:76:2c:68:
                    b0:ab:49:ae:d4:81:e5:7c:e9:72:6f:3a:7b:4d:da:
                    f7:b6:07:c9:1e:ed:04:d2:5a:0c:28:7a:dc:3c:ec:
                    39:c6:5a:37:b8:c0:ef:61:00:59:06:06:d8:56:ce:
                    c5:6f:0d:70:77:f2:7b:bb:24:b3:42:a4:3c:a3:ec:
                    18:35:de:9d:eb:3a:f8:f7:89:5b:7f:34:52:07:c4:
                    fb:8a:f1:21:69:e9:f9:ae:41:2c:d5:ba:c4:aa:f8:
                    f7:90:3c:e2:49:97:43:61:f6:d8:cb:49:24:6a:52:
                    0a:1d:a5:a4:4d:3a:12:08:2b:79:64:f5:28:b8:e7:
                    2d:98:6f:9b:9c:76:48:a8:d6:19:c2:62:63:a7:e6:
                    8f:18:91:cb:c1:be:a6:fe:65:20:9f:a7:f4:76:80:
                    88:24:ea:1b:7c:f8:6b:9c:32:9e:64:26:20:4d:a8:
                    c9:4b:72:6b:92:1f:5d:fd:8d:09:8b:34:71:be:5a:
                    09:b9:eb:67:03:db:66:f6:23:cf:64:65:8c:5a:10:
                    d8:75:1c:22:7c:2b:05:34:7a:38:42:ad:9a:f4:14:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:21:99:87:18:D5:0E:67:0F:7C:DF:EF:FF:2C:6D:EB:8C:E9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f318fbf6-7490-3465-b99c-a0a53aaa75e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:92:0a:6d:f9:18:fc:dc:ce:e8:e3:b9:64:de:e9:21:5f:e3:
         85:6e:5f:41:cb:aa:55:46:19:92:f7:29:3c:11:c6:50:99:3c:
         7b:a4:ef:b1:a7:6c:fd:19:08:bb:0b:92:53:b8:59:d3:f6:6b:
         a7:cb:c4:cd:e4:bc:9c:3d:92:e2:01:ae:2e:d6:d1:ca:dd:d7:
         79:12:2b:8f:38:df:64:ad:19:26:3f:0d:44:b6:0a:09:be:c0:
         ea:63:8d:5b:33:05:14:c8:b7:f0:a6:26:64:44:02:6a:52:38:
         ea:97:11:51:20:44:99:6c:36:b5:83:16:7a:23:eb:bb:47:bf:
         1b:f9:de:f4:b6:09:16:54:29:dc:f1:86:41:9a:b0:4f:f2:7d:
         4f:c8:50:48:6b:f7:a6:de:26:52:2e:f2:ad:76:c1:0a:cc:9a:
         2e:39:a7:bf:d0:0e:33:39:62:3f:da:b9:8b:a7:16:53:fb:43:
         d3:3a:dd:d3:05:c9:19:3d:39:82:7d:93:8d:f0:0d:68:da:dc:
         be:6d:4c:ef:21:8f:01:8b:27:c6:05:5b:e9:c7:79:b1:0c:ed:
         ad:d4:67:9b:e6:59:50:6f:3e:f9:24:27:20:57:7b:3a:ee:22:
         0c:ea:e1:d5:c4:c3:27:3a:40:ac:6e:91:e1:41:0d:18:25:81:
         b5:df:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:31 2025 by rpki-client