Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
File:                     29077896-9620-3e68-a116-dbfb8641ca35.roa (raw, json)
Hash identifier:          BiOuC+bFAi5jZ6+ZY+59pp7dBNIWRsR/8Gawj20yG6E=
Subject key identifier:   02:9F:3B:DD:BF:20:11:02:EC:36:60:B2:32:AA:A5:49:A3:08:8D:34
Certificate issuer:       /CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
Certificate serial:       010D0C9F4328584B52A77F82855D0C545E6D5600
Authority key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     12129
IP address blocks:        204.106.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:7f:82:85:5d:0c:54:5e:6d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=2c2dbd99-4300-4b78-82a0-4628562b6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:05:3e:2e:a2:ed:df:e2:4a:8d:30:cc:c7:
                    55:f5:f4:e7:9b:b3:e5:22:36:fd:6f:84:a5:0d:d5:
                    ff:59:4f:ce:4b:79:70:cc:36:6a:07:40:11:e1:87:
                    a4:e9:38:ff:92:be:64:29:19:21:45:1f:78:b8:8a:
                    2c:22:df:cd:40:c6:4d:04:3b:bd:20:08:60:29:ea:
                    0b:68:e8:1f:77:f7:47:bb:07:66:fa:cb:54:94:56:
                    d7:7b:9a:f2:8c:91:6c:3c:b5:e1:57:b6:3f:eb:c1:
                    c0:fa:8d:57:3c:cc:6b:ed:d8:37:44:0b:8f:d9:92:
                    f0:5a:8a:79:c6:ec:c9:32:c6:e8:97:be:dc:d5:70:
                    43:13:29:bd:8a:0e:53:72:4b:56:fe:c5:10:eb:12:
                    48:65:c8:7c:e1:62:6a:60:36:a9:08:c1:7e:39:3c:
                    74:e3:a1:9e:8b:92:ce:10:f5:c5:51:b2:0e:1f:22:
                    f3:e0:56:f9:6c:5d:50:67:ef:22:3f:19:aa:38:bb:
                    e8:e7:f9:71:40:b5:7d:78:03:1c:1c:2b:bf:ae:7c:
                    fa:d7:27:18:88:b5:d4:23:d0:20:55:89:94:ca:5c:
                    40:1a:e9:5d:90:83:88:25:a9:11:36:7f:f2:29:13:
                    23:f3:b9:36:9c:36:86:7f:5a:4e:99:24:18:6b:53:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9F:3B:DD:BF:20:11:02:EC:36:60:B2:32:AA:A5:49:A3:08:8D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl

            X509v3 Authority Key Identifier:
                keyid:37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.106.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c7:60:47:07:5e:ea:59:d5:64:de:f1:10:89:9a:18:cc:e4:
         42:e7:64:d0:f6:6a:4c:ba:b9:ca:ee:15:e4:c2:4e:32:f1:ae:
         5a:65:71:e9:73:5d:46:c3:7a:d8:1b:cc:d5:b2:b4:9d:4d:fe:
         fc:67:ef:f9:19:46:8d:98:68:ad:fc:58:96:53:b7:7f:2f:d8:
         3a:d8:35:1f:41:1e:2e:0e:d9:df:7f:08:d5:60:40:1d:0e:17:
         6d:d4:7e:1c:5b:20:0e:09:19:86:37:f2:71:95:f7:85:37:67:
         1f:2c:2b:b8:c3:4f:a2:73:68:47:a0:9c:c0:85:f1:68:65:86:
         ef:8f:23:31:d2:1b:ac:5c:ac:c8:1e:52:91:26:33:e8:87:5b:
         22:6e:6d:53:24:7d:26:61:16:e2:ac:e2:91:be:74:8a:88:cf:
         79:b0:ae:e8:c1:39:10:cc:62:7f:12:cc:98:dd:4c:e1:dd:28:
         a7:c4:55:22:95:94:15:89:c5:d5:f5:6d:1e:d1:08:89:fc:36:
         36:39:39:eb:b6:2b:3a:11:1b:e8:e6:1b:ce:47:d0:1b:d6:87:
         35:73:1f:bf:ba:0a:dd:6b:7a:ee:9e:62:be:32:a1:bb:51:e2:
         0b:ca:bd:4f:5d:43:4a:c1:d3:75:84:ff:94:9b:cd:7d:fa:61:
         18:b1:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:34 2025 by rpki-client