Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
File:                     fa7de386-946f-3fd2-80ff-439e4566d9cf.roa (raw, json)
Hash identifier:          MUgijRbL5LwsXhyC5Q0jIxoEaTPy64dOFPMjd4Y1Pak=
Subject key identifier:   3F:CF:0D:75:F8:27:6A:BC:AC:C5:EA:0D:90:E7:EC:F0:DD:B2:7D:56
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584B79BCB78F17CED2805BC50140
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     174
IP address blocks:        207.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b7:8f:17:ce:d2:80:5b:c5:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=91813f92-ecea-4eb1-94a4-2f4638dd9c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:e1:b6:56:d8:cc:78:7e:03:a7:c5:b0:46:
                    94:a3:42:7e:48:d5:dc:9a:55:c5:e5:0e:93:c6:e2:
                    74:fd:22:28:07:dd:33:46:e1:7d:ee:3c:e5:a2:76:
                    7b:ba:2f:df:7d:67:d0:82:5c:f8:bb:34:5f:8e:15:
                    81:d2:5b:f9:3c:0d:c7:1e:d4:3a:33:f6:23:07:92:
                    a2:8e:21:76:c4:8c:b8:3e:7e:a0:92:bb:7c:19:38:
                    4e:16:11:c1:70:07:9c:97:15:62:1e:dd:9e:92:9d:
                    f8:d6:b8:0c:f7:1f:c4:1e:d2:22:e4:4e:36:d6:76:
                    b6:0c:ae:c7:29:8b:69:6d:67:88:b9:61:f4:15:06:
                    ae:f1:7a:21:a1:a0:be:a0:8a:4a:fc:1e:7c:b4:f2:
                    5c:03:fe:ce:9a:6f:78:96:1e:68:9b:44:44:a3:36:
                    39:f7:ca:4d:e7:f2:69:69:24:59:e3:d1:08:54:18:
                    1c:8e:d9:d1:a3:d1:8c:8f:bd:3c:71:2c:68:e6:6f:
                    ea:72:8e:6b:2b:6a:9c:f8:8c:34:32:2d:23:a0:69:
                    ab:f5:c9:43:2a:4f:42:e3:62:58:9d:4d:76:75:3d:
                    52:84:9e:7e:b5:b5:f3:b6:0f:88:45:cf:0b:40:36:
                    4f:20:69:d5:95:1f:7e:49:8e:6b:de:57:12:0e:48:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:0D:75:F8:27:6A:BC:AC:C5:EA:0D:90:E7:EC:F0:DD:B2:7D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:59:40:a7:af:e9:d9:a1:4a:2e:42:91:f3:b4:28:e1:06:
         88:8a:db:f2:5f:ef:99:f3:2d:1c:01:cc:aa:bf:e1:26:92:01:
         3a:f0:80:c9:4c:b8:5c:36:f0:00:45:d8:ff:70:1a:42:d1:8e:
         5a:01:23:61:11:e7:a2:9d:86:2d:dc:20:e9:00:1a:d4:ea:37:
         f2:a3:c8:69:a0:e4:9f:9a:2d:b1:2f:01:09:c7:0b:40:2b:f5:
         6f:20:b5:c3:58:c3:39:5d:e4:1c:9a:6f:22:1a:d4:21:a4:c3:
         ea:71:fb:d4:22:d4:17:87:99:e7:db:3a:0f:a0:1c:b3:11:31:
         4b:41:bc:d6:85:26:d2:65:d3:a2:dc:33:02:83:f7:49:76:7e:
         c8:d1:66:c8:1b:83:09:85:6c:75:a3:f5:11:ae:36:dd:50:88:
         b8:fb:07:39:85:a8:ff:78:44:06:e9:f3:73:fd:d1:28:f7:f8:
         68:45:ba:55:39:4d:59:63:0c:e9:dc:b4:e2:b6:00:f4:0a:fa:
         57:6c:27:0c:4e:b6:22:65:98:a0:84:04:3c:49:ec:03:86:9b:
         14:77:1b:26:dd:ca:84:fb:31:46:0f:26:a8:ad:55:cd:d9:38:
         bd:f7:d0:db:b8:73:f2:5e:0d:55:04:04:43:c7:0d:d2:45:03:
         42:10:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:52 2025 by rpki-client