Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
File:                     573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa (raw, json)
Hash identifier:          RDbo56gbULdiyzrL6kXSEf+YA48WH9jF5cVduWKzl1Y=
Subject key identifier:   2E:0F:39:AC:3E:A8:50:E3:13:F7:01:60:73:D4:EC:18:B8:30:79:03
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584AE891297A8492A74AC8B63540
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     46261
IP address blocks:        104.218.197.0/24 maxlen: 24
                          104.251.87.0/24 maxlen: 24
                          172.98.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:29:7a:84:92:a7:4a:c8:b6:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=d315ad32-4b6e-4fe2-a87b-1e82a862368b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:01:0c:4c:d7:c2:18:61:67:b4:00:fd:fa:dd:
                    bb:e7:ef:4e:90:6f:55:4c:eb:c7:84:56:f9:d1:24:
                    d6:22:40:46:54:76:fe:56:98:07:5e:0e:c1:39:58:
                    77:c2:61:c6:4e:66:e4:d7:c7:7e:55:21:2c:63:a6:
                    50:61:0d:36:09:7f:b6:76:7c:36:c1:0e:63:9e:45:
                    2e:1b:2f:08:c8:44:dd:26:13:a6:39:52:25:47:de:
                    cb:98:dc:50:11:1b:64:06:44:0f:87:9d:21:be:6b:
                    3d:0b:99:fb:06:17:e8:f1:f0:91:1c:90:e7:a3:d7:
                    b0:09:8b:ae:ef:79:52:ca:03:5c:90:50:5e:34:8b:
                    b3:ca:78:2d:f1:85:fd:f2:4c:18:d7:53:9f:b6:fd:
                    19:ee:7d:fb:bd:31:69:67:05:9a:af:45:1a:00:22:
                    2b:41:1f:8d:cc:49:e7:d1:a3:d9:59:64:5f:44:cb:
                    77:c5:36:e3:2c:fe:79:5d:02:28:53:1b:f6:be:24:
                    c7:8a:59:cc:12:4c:c3:8e:fe:c0:84:b1:10:a2:e7:
                    e5:0a:cf:52:44:a4:07:cf:43:16:2c:79:4b:81:fe:
                    db:2e:48:07:c8:77:c8:ed:1b:6f:e4:2b:c8:fb:30:
                    96:9e:80:70:be:2e:3f:cd:54:9f:0b:a8:ff:8a:d2:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0F:39:AC:3E:A8:50:E3:13:F7:01:60:73:D4:EC:18:B8:30:79:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/573cd031-ff6b-3d53-b62b-dbd5bc177a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.197.0/24
                  104.251.87.0/24
                  172.98.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:80:05:cc:c1:01:83:57:8e:d2:9b:3d:28:1c:38:f5:66:
         a8:05:19:5a:b7:9a:3d:7f:c4:bb:d1:6a:50:3d:4d:d7:d6:bf:
         0e:04:c9:f0:d0:67:26:44:1f:09:5e:c8:91:fd:49:c4:d2:9f:
         36:48:f6:31:e4:32:02:e2:46:1b:ec:ec:66:4d:6b:0d:90:31:
         de:44:4d:01:bd:77:5f:b2:70:17:a9:69:92:c4:8d:fb:e3:f6:
         71:82:9c:0c:2a:7d:a1:8c:d8:c7:c9:cb:68:a2:6e:35:bd:fb:
         b7:9f:e5:28:9c:5f:da:af:b7:09:0f:66:90:0c:66:a7:7e:90:
         a7:83:97:fe:35:7d:4c:1e:4c:63:58:6f:2d:bb:ba:49:0c:32:
         71:65:9c:51:64:0c:ef:a6:73:bf:e2:5d:7b:a4:38:5c:00:85:
         09:b0:d9:be:18:e8:69:30:ac:15:39:5f:73:49:3b:5c:6e:d0:
         a6:32:fb:b9:35:74:69:4d:20:8d:e1:76:48:9a:41:6d:32:af:
         8d:d2:d2:63:a1:a8:2c:af:42:f3:7c:4e:c4:c1:9c:03:91:91:
         8c:b6:18:9c:7e:9f:a6:99:4e:26:47:0e:3e:f8:2f:45:68:32:
         1f:18:79:9f:28:1c:8b:5f:bd:5a:b9:55:1c:27:89:2a:40:01:
         92:08:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:47:14 2025 by rpki-client