Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa
File:                     be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json)
Hash identifier:          kBedjLySVx425ymzHWnklrEepE6fkCgkvrGfjmuPTW4=
Subject key identifier:   8B:03:52:1E:1D:22:D5:30:52:2A:0A:E5:70:7E:87:A9:6E:20:B2:04
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584B5141BFF13AFED2BCCFEF4C00
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     212238
IP address blocks:        199.181.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bf:f1:3a:fe:d2:bc:cf:ef:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=6b5fd1bb-0103-4ac4-80a8-c865cee9ed19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:65:01:78:ba:b7:c5:e3:88:4b:84:91:90:
                    4c:51:47:ed:c4:67:81:74:6e:29:da:2f:34:17:62:
                    3d:16:df:73:b1:5c:6b:8d:e7:c6:b2:a8:cc:d6:3d:
                    4d:1f:96:11:86:f7:46:39:d3:28:cb:b4:9e:eb:e7:
                    21:ba:cc:8c:43:d1:e6:0a:18:08:84:76:a7:b5:69:
                    15:79:a4:d2:69:57:0b:84:20:a6:89:55:0d:f3:ff:
                    96:d8:b4:82:9a:73:26:d1:34:ee:9e:9e:70:d6:7a:
                    51:f9:9c:18:5b:69:0a:7f:70:78:4e:dc:01:4d:02:
                    ee:36:9b:2a:d0:90:7e:34:6b:7e:68:32:f3:91:9a:
                    aa:05:ba:9b:17:89:2d:fe:ea:91:d6:0e:1e:04:8c:
                    47:fb:ec:22:a5:01:b1:38:4a:c4:22:96:bc:23:14:
                    fa:56:25:c3:31:a7:a5:3e:92:b9:b8:b6:29:42:b5:
                    2c:03:fd:db:e5:d7:fd:08:3b:5e:ff:43:15:74:af:
                    c0:66:02:db:1a:d9:23:b0:22:3f:d3:1c:c0:85:34:
                    b6:0b:48:62:b6:53:25:b3:e9:f3:d4:a6:34:be:8d:
                    23:82:89:93:9d:35:aa:84:8d:b0:d9:2d:73:de:04:
                    64:6d:11:96:24:68:f9:53:cd:96:30:c3:7f:08:02:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:03:52:1E:1D:22:D5:30:52:2A:0A:E5:70:7E:87:A9:6E:20:B2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:fb:fa:50:88:6b:43:95:6f:84:f2:18:09:7a:fc:96:5c:
         dc:6d:b9:4a:2a:45:d2:ab:32:db:3c:f7:9d:5b:3f:ab:60:41:
         1e:27:0a:d1:fd:e7:66:0f:71:2b:41:ee:c7:9a:73:ff:8a:71:
         ee:39:3e:9f:64:8f:9c:40:95:57:e6:fd:bd:69:ed:c0:85:53:
         8b:13:ba:c4:c6:4b:ce:b1:57:e0:23:70:05:7a:f6:ab:3e:40:
         db:e5:a7:47:91:d2:f7:13:23:d7:57:f0:d0:a5:53:3a:07:f5:
         f9:e6:59:0a:32:2f:91:91:08:1b:3a:ff:09:bb:a6:9f:9a:8c:
         ce:d2:d1:aa:5e:05:62:a8:61:ce:22:11:94:a1:a1:fe:d3:92:
         02:be:24:62:78:7f:dc:7e:e9:bb:69:17:06:15:6c:9a:26:8e:
         0e:82:65:11:49:f8:ff:2f:d6:15:13:f2:4e:be:c7:e8:e9:15:
         ef:79:be:b8:b8:16:d1:54:eb:72:3e:0f:4d:27:ce:18:02:e3:
         7c:ad:58:fd:97:5d:6f:76:7a:48:8f:64:c9:a3:32:59:a3:c6:
         ca:3e:17:c6:ed:ec:ba:75:55:cb:d7:f0:25:c3:85:33:e0:f6:
         cf:19:e6:36:48:1f:49:19:75:99:6e:27:99:a9:ad:c0:c6:3b:
         5f:f5:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:30 2025 by rpki-client