Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa
File:                     5461a472-b261-38fb-9166-72daeaab4676.roa (raw, json)
Hash identifier:          V8XI6ZjGahj4W/lIWA01BAOAygmwOyVlGEJhVOiAijA=
Subject key identifier:   76:C4:5E:0F:03:C3:16:2C:66:38:3C:DA:CC:39:BB:79:29:8E:1A:2D
Certificate issuer:       /CN=4af5b8d8-56f7-435a-93b3-22ae179ae6bc
Certificate serial:       010D0C9F4328584B4D11D2BF02E4B4E937996380
Authority key identifier: 8C:6C:55:9A:18:9D:3C:B8:62:0C:06:1D:E6:4F:CC:C9:66:8F:43:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     11492
IP address blocks:        204.11.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d2:bf:02:e4:b4:e9:37:99:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af5b8d8-56f7-435a-93b3-22ae179ae6bc
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=5ef61c1e-2dd4-4907-b001-d7baf5834c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:67:b7:52:d5:34:9b:4f:cf:89:56:9c:75:
                    3b:f3:17:4c:bf:14:95:01:d2:a2:9e:a6:17:2f:72:
                    9d:2a:b7:27:0d:8c:6c:6c:d9:57:08:43:9b:5d:51:
                    18:72:d4:d9:67:c4:3b:3d:f6:9a:b0:c9:a6:9b:e5:
                    58:dd:93:55:e3:4e:f9:02:2b:c6:01:2e:55:5f:3e:
                    5b:6b:0a:50:bc:0e:7e:cd:18:cf:18:2d:28:65:61:
                    81:6e:41:85:a7:a3:de:4f:75:b7:40:e4:99:5d:93:
                    e7:68:ec:83:e5:e3:ae:1c:73:f4:42:41:a6:c3:82:
                    24:7b:5b:e5:7a:e2:a9:c4:c8:7d:2a:2d:41:11:59:
                    78:f2:cf:4c:75:8d:6f:cf:b9:ac:35:39:37:c1:5d:
                    72:3a:70:f6:0c:a9:7a:75:28:2f:6c:18:64:c9:02:
                    b8:81:53:61:a2:26:21:c5:c8:3e:8c:e1:60:03:19:
                    3a:eb:c0:a5:94:e7:41:73:2e:3e:ea:a9:b0:1a:fa:
                    f5:06:70:d9:5b:7d:cc:59:f3:cc:d3:ed:6c:17:5b:
                    6b:f4:5b:52:5d:57:01:bf:b4:6b:89:58:3c:f7:40:
                    22:e2:09:76:e4:6b:24:b8:f0:55:10:2b:1e:de:2f:
                    dd:99:84:ab:38:57:bb:88:fa:b0:97:8c:02:2f:3a:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:5E:0F:03:C3:16:2C:66:38:3C:DA:CC:39:BB:79:29:8E:1A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.crl

            X509v3 Authority Key Identifier:
                keyid:8C:6C:55:9A:18:9D:3C:B8:62:0C:06:1D:E6:4F:CC:C9:66:8F:43:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:19:04:55:4e:2b:00:02:0d:94:a3:48:eb:83:18:8e:29:4e:
         dd:b8:39:67:19:93:1a:14:69:20:f9:e0:57:7a:d3:10:bf:e1:
         61:d3:04:e0:61:ca:c5:20:34:73:c7:35:59:90:38:c8:93:6d:
         bb:77:f8:f1:95:7b:2b:21:14:33:d8:b0:74:3e:83:56:e2:9b:
         18:3a:f5:d5:ab:91:27:b2:f2:d5:c0:91:a4:23:aa:5b:41:7a:
         a2:56:6b:31:70:79:de:87:fe:51:e1:4f:18:13:d1:49:cd:47:
         34:95:f3:a6:13:fe:8c:44:50:95:89:c3:78:a9:d7:5f:22:c0:
         43:da:7d:f2:7f:23:f2:b2:0b:47:a3:da:70:2c:59:ce:0a:40:
         71:7d:d8:e0:40:7b:ab:a0:cc:6f:89:d6:0d:e6:1d:4a:89:68:
         09:53:94:d1:f9:6b:40:4b:21:2c:a7:c3:7e:ef:a9:c7:29:ef:
         65:35:ea:9f:ec:81:be:83:11:59:42:e0:33:67:14:20:5a:1b:
         84:f4:3c:05:d6:c1:78:b1:99:f2:04:0c:37:e1:12:2d:6a:a2:
         b3:e7:03:85:e7:3b:d1:3b:9d:4f:d6:06:d5:17:ac:6f:9d:64:
         9b:78:76:32:ad:83:09:ed:36:3c:6c:07:c7:43:41:f7:7c:74:
         62:87:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:07 2025 by rpki-client