Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dd90f70-9981-3f00-8f43-fa5f17d1970d.roa
File:                     7dd90f70-9981-3f00-8f43-fa5f17d1970d.roa (raw, json)
Hash identifier:          ut1yMN4ukUikAByjdsECJ2nkAnlfZL9SZ0BcWpoBpDM=
Subject key identifier:   50:84:5A:61:BA:98:20:AD:49:84:50:B0:50:BE:BD:8F:B7:87:85:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AFC1C0C57749043D0FB855D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dd90f70-9981-3f00-8f43-fa5f17d1970d.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        172.235.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:0c:57:74:90:43:d0:fb:85:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=3face8ad-e946-4e45-b8c6-ac7b7c78ac5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:b2:ba:7e:6a:f3:3c:1b:a6:94:c7:d8:3e:
                    34:36:bb:3f:1c:97:bf:b5:15:d2:1b:27:8f:e2:cf:
                    29:36:75:08:6f:59:bc:f8:43:64:03:8c:f5:16:86:
                    62:6a:99:9c:56:85:c5:00:2e:9b:ea:27:31:54:b2:
                    86:23:b1:bb:5f:4c:6c:e8:ac:23:08:5c:c1:c6:b3:
                    d9:c2:b3:95:9e:e9:a1:0e:ed:8b:d7:a9:eb:d7:1f:
                    91:58:b6:e6:07:a9:dd:d8:37:d4:f5:95:99:1f:b5:
                    e6:3c:93:00:26:d0:04:df:4e:1a:f0:b0:11:14:10:
                    b2:fd:24:76:f0:7a:fa:70:8c:42:b1:3c:fd:7a:bf:
                    8e:7a:54:31:a2:b1:97:06:59:f0:a4:58:ed:fe:04:
                    d8:2f:35:aa:b1:4b:e9:e9:b9:d8:98:12:17:7b:6a:
                    ab:88:fb:72:ad:32:5c:09:59:9b:e7:c0:7b:52:6f:
                    19:e1:60:12:e8:73:1e:13:43:35:3b:d5:77:33:80:
                    ab:8a:5c:b4:cb:0c:2a:c7:57:30:06:cf:f4:4c:0a:
                    f8:8f:93:f3:13:4f:c2:42:1a:aa:10:18:97:90:77:
                    81:2b:c3:5c:d5:6c:25:8b:c6:92:a4:bf:8f:f7:b7:
                    db:11:b9:86:ef:7b:59:0d:c0:95:16:10:5a:2d:88:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:5A:61:BA:98:20:AD:49:84:50:B0:50:BE:BD:8F:B7:87:85:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dd90f70-9981-3f00-8f43-fa5f17d1970d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:66:bd:6c:1e:7b:d4:16:5e:50:99:ff:ce:49:0e:1a:88:b3:
         6c:26:34:0f:3c:2e:00:22:e8:e0:3b:c9:d6:8a:26:ec:50:c6:
         74:aa:be:e1:20:b3:86:f1:07:f4:6e:da:33:9a:f5:08:2e:ab:
         aa:82:fc:cb:57:4a:53:f0:be:79:81:d6:fd:35:6c:94:5b:d2:
         2b:84:cf:6e:8f:a6:1a:1d:b0:ec:e5:2e:30:cf:39:ea:0f:aa:
         eb:8e:16:32:de:e7:33:df:54:2f:ce:53:49:41:fe:b3:4e:10:
         5f:d3:45:f5:e6:f4:43:f1:41:41:05:86:5c:87:89:1e:73:9e:
         6c:5d:5a:40:63:bc:f9:25:7d:8d:b5:90:fe:58:79:bb:7a:57:
         5b:3b:9b:03:8b:37:4b:d4:ec:22:5f:6e:0d:6a:15:97:d4:a2:
         cf:65:36:58:3c:5d:05:6a:2a:ef:7f:c6:0e:02:a2:fe:19:77:
         05:7a:d8:59:5b:cb:b0:3e:0d:7e:77:ca:af:43:b6:22:2b:9b:
         bf:f6:7a:93:3f:3f:2f:7c:f7:bd:e3:05:5f:a5:6a:bc:65:83:
         5b:d6:c2:b3:f0:86:14:b2:70:31:6d:20:07:11:2f:59:ff:30:
         56:69:55:ce:16:b9:2b:14:36:cf:d7:87:a3:b1:6e:4b:64:f0:
         5f:ce:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:59 2025 by rpki-client