Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5791a2-1b6b-383b-ada0-37304f38b5c6.roa
File:                     3c5791a2-1b6b-383b-ada0-37304f38b5c6.roa (raw, json)
Hash identifier:          bLtaCr0zuhapZZyJRYgbzfZCLwxwLenBEZotd3Y2cQQ=
Subject key identifier:   A0:5D:F0:19:22:48:83:72:C3:F5:76:8D:B7:69:43:6F:3D:BA:78:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE0319C6266C59ADF23683280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5791a2-1b6b-383b-ada0-37304f38b5c6.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        184.25.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9c:62:66:c5:9a:df:23:68:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=726cc4ac-12ce-40b3-8b76-5f7a157432e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:9e:e3:0f:d7:7b:d9:c6:e0:df:ac:5c:b0:
                    ce:80:7e:eb:34:10:f5:5a:d2:3e:b5:98:b6:3c:10:
                    6a:63:fe:cb:0a:b3:61:3a:6a:0d:03:23:9a:9d:a1:
                    b0:3f:5f:a0:a7:70:02:c4:09:7a:20:2e:8c:16:12:
                    29:af:81:85:9f:8d:6c:d5:0e:4e:e9:99:83:38:0d:
                    69:61:13:b6:23:26:60:e8:1c:ed:6b:f8:b6:9c:73:
                    78:4b:66:c6:b3:9e:3c:34:d6:99:37:49:57:bc:94:
                    2e:cf:b2:db:41:8d:11:fe:ca:b0:3f:03:83:85:1e:
                    d0:63:d9:87:a0:a5:9d:af:a5:f2:36:c0:70:d6:fa:
                    51:c7:5d:ef:d3:c8:59:c4:25:62:4c:97:cb:5f:64:
                    cd:8b:69:e7:72:0f:f2:31:09:15:8b:2a:e1:eb:ef:
                    4b:50:a7:b2:6f:9b:6b:d7:c9:c5:31:e1:8c:3f:0f:
                    f1:cf:04:95:ed:df:15:ce:53:59:51:b1:d3:d3:9e:
                    83:9b:f5:05:65:21:53:a3:a1:52:31:97:ad:30:46:
                    09:ac:40:0f:5f:8c:75:40:d1:4f:5a:39:79:90:3f:
                    45:75:d7:08:1d:5b:95:3d:d5:15:2a:dd:1e:4b:6e:
                    43:4e:54:d0:24:b0:0c:6d:70:2d:fa:b2:18:bb:04:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:F0:19:22:48:83:72:C3:F5:76:8D:B7:69:43:6F:3D:BA:78:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5791a2-1b6b-383b-ada0-37304f38b5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:91:fa:84:43:06:25:a7:9c:fc:2e:b8:0f:14:22:2c:bc:
         a1:61:32:ff:e4:b3:ae:18:d9:fc:04:2f:9f:bb:e4:1a:2e:5d:
         02:ec:a5:d8:b2:fb:9e:1d:96:40:85:34:f7:8f:20:b6:76:15:
         70:8a:e3:54:bc:07:a0:ac:52:e9:06:88:7d:a8:6f:21:9a:31:
         89:5b:c8:0b:2a:b1:21:22:83:c4:51:e8:d1:ec:33:b3:62:be:
         f5:08:df:7d:9f:52:7a:84:2f:cc:97:9b:77:05:51:f7:cf:d6:
         37:c2:53:70:d5:d0:11:71:fa:ec:8d:d0:b0:af:1e:9d:1f:69:
         ae:b8:11:28:b8:41:6a:0e:3b:ca:17:af:75:eb:1a:52:da:24:
         75:bf:b0:32:01:6b:c7:0f:8d:61:26:7b:89:f2:5b:1b:fa:b1:
         16:c2:39:1e:32:93:1b:e9:2d:97:bb:10:fa:1c:37:b3:e4:54:
         12:77:9e:aa:f4:4e:e5:a4:bc:f4:97:a9:99:5c:d5:81:20:45:
         cd:37:db:71:7d:21:d3:38:54:67:ab:f9:fd:5d:59:d2:97:cb:
         7f:5e:96:fa:a2:15:a4:b8:64:8f:7c:c7:97:73:30:d9:7b:11:
         ab:3f:f2:fe:aa:c8:ca:ad:52:77:1a:d1:52:60:c5:6f:33:46:
         4f:9c:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:49 2025 by rpki-client