Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa
File:                     cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa (raw, json)
Hash identifier:          8qHd+/4NveBr7LDjwmvvW0bzGPJl/6nTuGyvx9YHEZo=
Subject key identifier:   61:FD:AF:22:56:A7:6C:03:1B:D3:5B:E0:44:E4:87:31:06:C7:86:B0
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B76F2A1FC74B1C4F78208FB80
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26229
IP address blocks:        162.138.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a1:fc:74:b1:c4:f7:82:08:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=a9781a00-b8fb-4901-ab69-b1a695f66df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:61:e3:97:ce:18:3c:28:4f:05:7f:fe:e7:
                    4c:a0:da:2a:58:06:ad:61:99:b4:ad:fc:15:4d:9d:
                    4a:c5:fc:82:9d:ed:c2:59:4d:4c:7d:c9:9a:f8:75:
                    e6:27:d2:92:b5:6e:1a:72:72:0e:cb:38:12:7b:ec:
                    dc:05:ef:bf:c4:3f:f4:75:7c:d6:4c:2b:a8:79:e7:
                    28:26:43:64:6d:ea:38:26:e5:34:63:30:e5:0c:75:
                    84:e2:8e:5a:d8:a9:31:64:e8:ba:f7:ca:48:41:54:
                    4b:0f:49:06:be:de:d2:f2:4c:4a:86:d0:7b:74:dc:
                    36:93:8d:48:d6:ac:a4:31:ca:a5:8c:73:07:f6:63:
                    54:a4:7e:d8:85:3b:5d:ec:72:5e:42:e0:10:5d:ed:
                    74:de:0e:5c:e2:31:18:79:ae:62:ff:11:d6:e7:58:
                    7a:1b:a6:80:cd:42:e3:80:b3:5b:61:39:07:f4:ff:
                    6e:83:9b:38:63:cb:b9:00:af:45:d3:54:ef:a1:4a:
                    ca:a8:bb:56:9e:d9:b6:6b:d6:ce:15:41:89:12:7a:
                    88:ba:80:61:91:35:3d:b4:18:b6:cd:21:a4:39:a8:
                    d2:6c:41:2d:31:f7:d7:18:97:26:70:3d:3c:34:0f:
                    89:de:70:64:99:0d:8e:e8:99:d7:d9:b7:81:e7:a3:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:AF:22:56:A7:6C:03:1B:D3:5B:E0:44:E4:87:31:06:C7:86:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/cb33c5ff-4e3b-3ed3-b46c-a371896a6c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:e6:77:20:62:dd:2b:3b:7e:41:5a:d9:59:b3:5e:26:93:
         86:6f:bb:66:00:d1:69:8d:fe:18:32:d9:a0:9e:1f:72:96:41:
         60:8e:51:bc:cd:90:fe:dd:e9:6a:29:72:d7:95:4a:75:27:3e:
         b3:05:63:64:44:4f:c4:a2:40:3a:a1:15:9a:a8:b3:75:50:bd:
         99:91:98:f4:f7:71:d3:ea:77:3e:97:9d:47:91:5a:06:91:f3:
         83:1a:c1:53:9c:25:9a:fe:61:32:6a:c2:45:f9:81:94:e8:bb:
         bb:fb:89:d1:8c:da:1b:40:ea:95:f0:85:e9:99:d9:87:0f:84:
         b1:67:ec:66:14:31:1d:87:c5:6e:d5:1b:48:d5:f1:4f:41:cc:
         e8:b2:66:fa:9d:52:d5:24:e7:37:74:3c:48:c9:87:1c:da:13:
         85:8f:c0:f2:f0:81:33:38:70:1a:01:eb:e1:47:2f:75:7e:ce:
         69:d1:fa:f1:a8:df:c7:e9:c0:da:c5:c3:4d:cb:99:06:c2:7f:
         ce:93:6f:7d:16:38:c3:03:d5:0d:73:07:62:51:51:20:dd:97:
         57:a8:e1:4f:d4:bf:fe:d8:7e:88:f7:bd:0a:fb:b0:5e:bb:33:
         cd:ca:d3:c9:9d:97:73:93:49:30:0b:b3:f7:8c:b7:d5:5c:e3:
         1d:e3:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:16 2025 by rpki-client