Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/0dcd5a9c-48cf-3d77-9389-09b0cef0243f.roa
File:                     0dcd5a9c-48cf-3d77-9389-09b0cef0243f.roa (raw, json)
Hash identifier:          VJ5Wjk8naXBP7Zx5aq2rHqXRTnVLht9TbeDK81cZHjg=
Subject key identifier:   13:E3:82:70:BE:D3:C7:AD:9B:E0:C1:64:F5:05:3F:AC:41:7B:C3:68
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584B43F761CE0149A498379A2AC0
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/0dcd5a9c-48cf-3d77-9389-09b0cef0243f.roa
Signing time:             Sun 21 Sep 2025 06:45:18 +0000
ROA not before:           Sun 21 Sep 2025 06:45:18 +0000
ROA not after:            Sat 20 Dec 2025 07:45:18 +0000
asID:                     10794
IP address blocks:        199.201.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:f7:61:ce:01:49:a4:98:37:9a:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Sep 21 06:45:18 2025 GMT
            Not After : Dec 20 07:45:18 2025 GMT
        Subject: CN=5ed33821-f14f-46ce-b3a6-dda03e2cd909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:a1:83:be:dd:cf:31:85:76:50:2f:a6:9b:
                    bf:50:e4:dd:87:0a:36:0e:55:b1:1f:f7:b7:99:de:
                    ef:5f:32:5d:09:ed:c5:60:32:3f:91:b0:a7:25:a1:
                    c7:0c:c9:3c:b1:d4:d1:f4:b1:ec:10:44:38:3a:9b:
                    b3:8b:a5:bf:d4:03:b0:76:c7:0b:dc:62:53:79:d8:
                    ff:a3:bd:e8:b4:4b:a9:6f:8f:81:e3:31:10:f7:20:
                    bc:82:24:16:c2:17:0c:3f:b9:8a:9a:9e:01:21:f5:
                    17:bf:23:6c:f2:17:04:a0:da:75:33:cd:26:7e:83:
                    d1:7b:f6:df:62:92:31:93:81:00:a1:ec:83:05:30:
                    d2:4f:84:2d:b7:30:0a:cb:cb:35:a0:05:7f:75:3c:
                    16:d3:44:3a:6d:b3:a9:68:d5:06:be:47:7c:d8:f7:
                    f0:a6:07:20:4d:5b:0a:e9:7f:54:6b:f2:4c:1d:61:
                    e9:04:9f:36:39:d0:92:35:ec:09:50:a6:e4:d7:04:
                    9a:3f:0d:10:35:19:f5:c7:29:5d:e8:c9:79:0c:5a:
                    7d:11:7b:4e:97:46:32:c5:01:d2:2e:55:53:1b:af:
                    2f:d0:a8:9b:af:98:ce:be:72:d9:58:79:0c:35:d0:
                    d8:84:8b:c2:0e:e2:a7:db:f3:15:07:6e:b7:14:74:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:82:70:BE:D3:C7:AD:9B:E0:C1:64:F5:05:3F:AC:41:7B:C3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/0dcd5a9c-48cf-3d77-9389-09b0cef0243f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:6f:5b:a6:65:fe:d3:58:f5:d8:aa:3e:bf:d5:9b:b5:75:
         cc:5b:76:6a:b1:84:a1:41:0c:0d:31:25:5a:5e:4b:02:78:62:
         19:26:e7:f0:32:7c:d1:23:49:03:b8:7a:1b:ac:43:0b:3f:f5:
         65:1b:5a:95:da:f7:58:c8:97:f6:52:80:13:80:71:74:74:20:
         c1:45:82:15:1e:03:24:a7:0d:9f:4a:b1:7d:bb:36:05:b7:e8:
         ab:05:d3:9b:f6:88:e7:cc:97:f2:a0:4a:1b:52:72:19:3c:f6:
         e1:e4:36:da:9b:f3:6e:c0:7c:0f:e3:cb:8d:2a:3b:5e:3b:63:
         c2:74:bb:85:c5:89:23:f6:d6:5e:12:54:c3:0a:2d:1e:46:26:
         2a:23:b3:26:d0:2f:7b:3b:4b:34:5f:e7:5a:b3:ef:8f:51:aa:
         9b:51:85:f9:69:fb:a6:7e:81:cb:89:a5:f7:b3:b9:90:a7:ea:
         d4:ec:f6:b7:34:7b:b1:2e:23:f0:5c:46:a1:e8:75:6f:7f:58:
         ec:b8:03:8a:0f:ea:d9:30:34:1e:82:4d:bf:66:1b:98:f8:20:
         ef:5e:22:b2:d1:d8:4a:99:7b:08:10:b6:23:13:d5:23:1c:8d:
         46:52:c0:8c:28:bb:f8:22:82:a0:3d:fe:7a:97:4e:84:f5:ae:
         ff:d9:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:07:32 2025 by rpki-client