Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
File:                     e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa (raw, json)
Hash identifier:          kbzFHdmJnoSuWqt0x+k3wvm7KOBG/q9ChT1ZskGQQ0Y=
Subject key identifier:   76:24:51:96:F1:CF:EF:FB:69:A0:CE:5B:73:8C:24:9F:11:A0:A1:A7
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584B92DCDD2E82440385ACDCD480
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        205.201.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:dd:2e:82:44:03:85:ac:dc:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=749fe232-6b7b-4750-a421-de3988a6ca38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:40:a9:db:4f:72:03:e2:4b:5f:7a:2b:df:
                    74:3e:05:d2:71:08:55:ec:d3:f8:5a:dc:48:a7:12:
                    9e:61:73:48:d5:6a:e1:f5:11:b1:84:c1:00:86:cd:
                    7f:8e:10:57:c9:55:38:97:63:df:56:33:f2:aa:80:
                    a3:8b:b0:2e:b4:20:e9:8e:d3:36:01:b0:42:e5:87:
                    4e:57:d3:a9:4e:18:7b:f3:9a:83:93:10:a9:25:c7:
                    bf:4c:cc:1a:34:a1:47:c5:40:3d:f9:a8:c0:aa:06:
                    3d:8a:e4:ff:d2:12:bf:fc:c7:d4:d2:c3:50:5d:e2:
                    1b:82:89:b8:0a:91:f7:7d:ff:f6:f0:49:75:26:05:
                    d2:65:6b:22:c1:40:4c:a9:bc:66:28:1a:b2:a5:1f:
                    bd:06:95:7d:aa:e5:9a:69:ff:73:7b:dd:78:e8:e6:
                    35:01:4b:05:95:3e:fb:54:04:2c:c8:b4:46:94:44:
                    79:d9:d4:34:d8:d9:22:c1:a1:c4:3b:8b:6f:19:00:
                    36:8f:81:62:99:c1:b8:fa:09:4e:70:83:82:bb:4e:
                    a4:00:8c:f3:ba:3b:0d:ba:a4:10:76:2e:ae:94:04:
                    54:d3:08:60:3d:5f:bd:12:d8:c1:60:32:ac:11:7a:
                    d2:ae:ba:79:f8:1e:d1:8e:09:c0:bc:fd:1e:1f:9d:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:51:96:F1:CF:EF:FB:69:A0:CE:5B:73:8C:24:9F:11:A0:A1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:94:3d:24:99:05:80:93:0b:47:61:f2:cb:aa:87:42:de:
         c3:f8:45:69:aa:ba:33:99:bd:a1:53:df:90:fd:5c:2b:13:f2:
         6e:08:b3:e5:3c:5e:3e:7f:37:88:6b:2f:6d:d0:14:1e:22:da:
         27:f9:91:f7:6f:33:4f:f3:26:46:f4:b9:6a:13:94:fc:24:57:
         10:8f:67:01:a8:62:c0:f4:19:6a:01:5e:19:3b:29:70:bb:98:
         c7:03:dd:3c:c1:3d:b9:52:0d:4c:82:f6:a4:43:a3:d4:7f:87:
         57:33:3c:89:60:ef:22:6f:f3:b0:26:bd:82:eb:91:4a:5d:07:
         22:6b:ba:15:6c:8d:c0:54:89:70:73:30:81:2e:43:06:c3:75:
         f4:86:06:ee:c1:70:fb:e9:7b:e8:6a:32:9a:91:81:8f:01:6c:
         45:c8:51:4f:a2:9a:0a:5b:45:58:5c:b2:a1:5a:bb:1f:40:af:
         91:cd:05:68:27:39:e8:1a:c4:cc:43:ac:a2:9a:d3:25:63:38:
         4e:9e:c7:ac:92:b3:6d:f3:1c:59:1f:e7:e4:24:42:d1:db:e1:
         3b:3a:7d:76:ed:3c:d9:a2:57:75:1b:26:5a:59:39:29:33:11:
         1a:7e:6e:54:84:9b:ec:e4:6b:b1:2d:54:40:50:ab:ea:f5:b4:
         a4:80:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:54 2025 by rpki-client