Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa
File:                     eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa (raw, json)
Hash identifier:          FHAvoMyBiifqMjGGf3tcWMBJPixsp/0fmcAuwxCkb+Y=
Subject key identifier:   9E:C5:C8:3B:E5:93:9F:F8:B4:4B:E2:A9:F4:F0:7B:F2:3D:42:CD:62
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B76F2A1C97B3B18D495BCD300
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26229
IP address blocks:        162.138.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a1:c9:7b:3b:18:d4:95:bc:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=ce4a816c-c816-4173-8b65-f700cb7c8886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:03:5d:19:56:4d:cc:79:f1:f8:79:3f:97:
                    77:e4:47:28:93:21:73:bb:51:f8:80:3f:96:56:db:
                    43:91:d3:98:5a:d8:bb:9c:6b:f4:d9:3e:9f:15:0e:
                    b4:bf:f0:42:73:fb:f5:cc:c4:b6:b2:e5:e9:59:50:
                    62:7e:b7:5e:38:ee:ff:98:36:b7:e1:96:93:d8:df:
                    b4:f0:ff:d0:c3:f4:62:ff:9a:13:ad:0f:b8:61:0d:
                    20:85:96:ce:ab:78:cd:f2:86:7b:70:7e:0b:9c:db:
                    67:e5:a0:0d:54:63:80:00:0f:ef:a7:1e:5a:aa:14:
                    20:7b:3e:72:61:db:86:13:2a:2e:bd:58:51:52:00:
                    8d:3e:c5:38:9e:e4:71:04:3d:a0:7a:b9:5f:e2:a8:
                    c3:13:02:63:25:fd:e0:6d:83:ac:e8:26:6a:3d:f6:
                    34:36:51:60:3e:ab:c2:e9:d5:ff:90:c5:f3:f5:ac:
                    90:fe:90:1b:c3:be:66:85:b4:86:ce:af:d4:f7:c7:
                    11:48:b6:d0:d4:6e:5f:ea:3b:4c:e5:7c:4b:0f:a7:
                    f2:8b:50:e0:c4:b9:60:3e:55:58:69:c0:be:7b:29:
                    aa:2c:e6:5d:ea:32:03:1f:32:91:a6:ce:be:08:61:
                    33:f4:0f:10:d3:e3:1f:76:e3:8c:02:90:2f:a2:ee:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:C8:3B:E5:93:9F:F8:B4:4B:E2:A9:F4:F0:7B:F2:3D:42:CD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:24:70:14:41:5d:56:6c:60:b3:22:e2:2a:6f:24:2e:3d:
         9b:a5:b6:e3:b5:62:19:11:5d:9e:07:94:bf:06:94:f5:37:ff:
         7d:0b:19:4a:8b:a5:86:ff:44:28:3a:48:8a:75:22:8c:49:0d:
         90:9e:78:f3:99:28:e6:16:b6:e2:b2:10:5b:d4:6a:42:5f:7f:
         2e:55:d1:16:4f:d9:67:0d:af:90:92:60:36:94:8a:81:a1:2b:
         77:ed:d9:b6:e4:01:01:8c:28:e1:ab:2d:71:e5:82:da:53:a5:
         d6:79:da:20:40:66:2e:9e:f1:50:69:71:e0:0f:b4:62:79:c0:
         30:0a:3c:e5:01:c7:92:35:7c:6d:ca:db:fb:15:f8:90:91:61:
         6f:cb:68:23:00:57:a6:50:10:a6:b0:f6:e3:6a:9e:96:28:e5:
         b4:e0:0b:b3:10:11:fe:9d:06:a0:10:09:2f:77:0a:95:ce:ee:
         5d:9f:46:84:14:70:62:66:cd:a4:5e:d1:f5:9a:6d:3d:30:5a:
         98:3b:ac:8b:99:46:a4:d5:94:0a:ef:09:fe:7b:31:d0:7b:2b:
         d6:3e:32:b9:8e:95:b5:5b:a8:f3:9e:d9:1c:cc:f3:1c:15:c0:
         2c:12:a9:9f:8a:34:af:fc:ad:87:8f:d9:60:31:99:60:ac:5c:
         52:72:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:26 2025 by rpki-client