Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa
File:                     904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json)
Hash identifier:          5ltuFAE8IsxCAfwCtG3FIGr1xcKoXdV/kj9GJ/Wj7UE=
Subject key identifier:   FC:94:02:B5:00:18:E4:7F:AC:0C:1C:95:41:34:4A:D4:C0:4F:A4:0D
Certificate issuer:       /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5
Certificate serial:       010D0C9F4328584B92DCE674EABEE448F6A8D3C0
Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     13649
IP address blocks:        199.88.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e6:74:ea:be:e4:48:f6:a8:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=047d28c9-e2a9-4992-a20c-162fd3660bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:5f:82:05:7d:1e:33:3e:e6:45:16:c5:70:
                    33:6f:55:90:26:19:96:78:66:cb:50:89:02:b9:07:
                    e9:0d:2b:45:95:1d:7f:58:a5:8e:0f:49:ae:82:15:
                    55:c6:c2:53:81:63:2d:7c:02:6a:92:66:48:8f:24:
                    e4:f6:37:6c:fb:e6:ea:8d:cf:ca:f3:e6:69:d5:97:
                    35:1a:16:24:10:63:f2:68:bd:8a:df:25:24:6e:da:
                    f4:20:9b:b5:f9:56:28:c2:ef:fd:06:02:ca:ab:c4:
                    8b:d3:29:0b:df:82:e8:cb:ca:62:0f:3a:45:b7:3d:
                    20:52:4f:73:ae:39:a6:be:6c:69:bb:58:d8:f3:85:
                    6d:a5:3b:bf:53:88:69:58:ac:00:93:42:f5:af:9e:
                    2d:28:0f:16:5c:a7:fa:3f:33:19:e1:83:f7:f5:1f:
                    04:27:aa:a9:4c:2b:70:49:36:c1:54:1b:6c:29:39:
                    c1:61:3d:62:94:42:c9:68:7c:7b:cd:03:e4:3d:3f:
                    7b:a0:db:0d:0f:2b:ae:a8:50:3e:71:1e:80:6b:6a:
                    2b:26:48:91:7e:49:38:db:2c:54:8e:61:87:72:0c:
                    5f:9d:e3:fa:af:ac:00:79:28:4a:9b:bd:7d:7d:d5:
                    e2:08:91:24:37:6b:5a:38:d3:cd:83:0a:65:8d:fd:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:94:02:B5:00:18:E4:7F:AC:0C:1C:95:41:34:4A:D4:C0:4F:A4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:42:01:ed:16:fe:45:a1:b5:85:2d:70:de:5f:48:a7:59:0c:
         da:25:9a:ee:a3:91:ee:6f:50:15:be:05:1b:6c:89:b9:67:09:
         16:87:75:52:37:cc:8c:51:d6:e0:fc:fe:8c:3a:35:91:ea:bc:
         1f:30:06:2a:41:ab:be:02:dc:4e:dc:5a:37:f5:63:c8:05:40:
         0a:52:1e:a1:ba:74:59:4d:4e:7a:ec:44:3d:e1:8b:67:c1:5b:
         7f:66:ce:6d:ff:92:cc:c0:80:d6:c1:c1:98:ee:00:70:e6:12:
         bd:1a:2b:3f:7c:b0:d4:b5:ae:5b:43:54:55:ee:e3:35:99:23:
         52:26:7d:81:c2:a5:67:d3:87:df:f9:39:97:2a:67:fa:e7:ef:
         84:df:b8:fb:75:3e:c6:d0:48:81:20:da:0c:92:6e:47:da:fc:
         13:0a:47:1c:f9:84:48:f9:c7:54:f4:bd:95:f8:4d:ba:37:50:
         32:c9:b4:08:a2:cb:d0:f8:3b:17:8e:c2:d9:39:95:fa:0f:f8:
         48:c7:6e:bc:4a:99:68:ab:d6:4a:ef:63:7d:90:8e:c1:50:a1:
         7c:e9:85:f2:ee:5e:c0:45:b1:56:81:78:6b:b4:b1:7b:8b:98:
         0c:b4:0d:fc:7a:f3:07:9a:d1:99:d9:1c:4c:98:c2:17:49:77:
         b9:33:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:42 2025 by rpki-client