Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
File:                     e01fe237-d6f0-3180-bbea-fe38f284c022.roa (raw, json)
Hash identifier:          dnIh/j7Lf+TTdVFjG0hQ8/9faRzq1v65kLf2eFhiBK0=
Subject key identifier:   9E:09:33:6D:72:A0:D3:D9:49:E6:8D:FD:1B:59:99:E1:12:48:FA:12
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2C8D5FAFDF2A375F247600
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        142.202.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8d:5f:af:df:2a:37:5f:24:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=cd6b30d5-171b-4bef-8c19-d010f2fb6961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:a3:00:68:d8:11:6e:25:89:9b:54:d4:02:
                    b1:cc:53:d1:91:e7:fe:ad:1c:93:5f:12:41:d4:a6:
                    c0:3d:eb:ab:4e:c9:94:40:18:c3:d1:d4:5c:dc:8e:
                    65:ba:1d:72:4f:04:6a:e7:9b:b2:67:81:2f:09:81:
                    18:f3:26:7a:8c:9f:9a:ad:0c:69:66:83:bf:c8:3a:
                    09:14:9b:f3:be:5b:9d:8a:48:57:bc:63:a2:1e:d0:
                    85:53:ae:f6:46:d5:e3:4e:9c:9b:4c:88:ea:32:2f:
                    b2:c5:03:84:71:38:5c:59:ed:42:78:2d:af:9d:82:
                    5e:51:94:ce:f7:e6:ea:d7:4a:4f:cd:75:23:9e:80:
                    72:f9:8d:0f:9a:7b:b0:55:ed:67:93:50:d5:c1:c4:
                    8d:f0:f0:be:c4:5e:02:cf:76:38:2c:ec:a3:b2:fb:
                    38:71:4e:af:60:5c:2d:87:ac:48:ec:51:3c:80:33:
                    c3:fc:5d:19:24:b0:96:0e:b6:ea:44:f0:dd:14:f2:
                    e4:9d:71:be:98:32:ca:63:5d:6f:6d:d1:24:c8:51:
                    71:d5:4c:80:86:2a:34:68:19:a3:29:be:8b:8d:76:
                    da:83:65:25:f6:e9:d7:2c:68:ac:22:16:39:0d:0b:
                    07:09:85:22:51:2b:ac:d5:3e:f6:6b:99:bc:5f:42:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:33:6D:72:A0:D3:D9:49:E6:8D:FD:1B:59:99:E1:12:48:FA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:72:f8:cd:ca:ba:58:47:89:65:31:6c:a7:c4:fb:e5:bc:03:
         23:88:68:fb:4d:c2:f3:4f:3b:a9:f0:73:55:95:d3:64:35:e8:
         4c:48:83:e1:83:04:ba:b5:0e:08:cc:39:83:2e:d3:8d:c0:fd:
         ca:53:94:d2:6c:cf:d5:94:21:d3:9c:9e:80:1d:50:bf:e3:f3:
         e9:8b:aa:02:a3:7b:f8:14:9d:c0:c1:bb:1b:23:a5:99:f6:ef:
         a7:68:12:1b:2f:5d:12:59:3a:dd:26:8e:bd:e2:15:8b:6c:d6:
         b7:6c:2e:ad:71:5c:15:38:11:b9:a6:97:d5:a5:81:6a:c6:7a:
         92:1c:b3:d5:ee:f9:ee:fc:4d:5c:20:67:e3:18:ab:4a:c7:6c:
         c4:60:17:2b:39:6d:5e:94:7f:15:be:97:28:c9:8e:8b:7e:44:
         14:44:d7:fd:f6:f0:95:20:fa:ca:9e:1e:49:dc:08:17:0e:e1:
         73:aa:d4:c8:c4:05:19:29:16:6a:23:88:2d:f9:0a:5d:3e:8f:
         67:c1:de:35:72:b1:a4:e2:41:fe:27:6d:f6:02:4b:5e:d2:8c:
         b3:90:c4:5b:b3:4f:ab:7d:c2:17:bf:1b:a2:53:fe:90:60:83:
         fc:f4:94:31:92:0f:7c:54:25:77:3d:ae:74:ce:d7:89:e6:66:
         5b:b6:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:41:58 2025 by rpki-client