Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa
File:                     a3e55cbd-876e-36e8-91ef-1bd971886b83.roa (raw, json)
Hash identifier:          cpddUhqfmmaF7+SNlMIOl0wLah7+fuvnG/FN2uEIPms=
Subject key identifier:   C2:00:27:7F:9A:34:6E:1C:66:63:D1:33:A3:61:F2:4A:85:33:D3:B5
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B68FC9B4EA79CE3D9FE83A000
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     31898
IP address blocks:        173.199.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:9b:4e:a7:9c:e3:d9:fe:83:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=621e4530-c835-4a3d-bf36-671570fcb49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:45:d9:32:25:be:1c:74:d4:d5:a8:24:99:
                    88:4f:e5:42:e5:33:fc:4d:af:ce:b0:ae:b3:df:5b:
                    3a:b2:5d:5b:7c:fb:a8:6d:a7:c5:23:ff:92:e8:ae:
                    ba:d8:5e:05:27:d1:58:48:2f:fc:10:ab:eb:09:64:
                    be:d2:5e:1b:37:ed:1b:93:4f:b2:91:c4:02:d6:53:
                    b4:4e:28:99:17:10:bd:08:a2:6d:cf:f6:0f:e8:df:
                    53:62:41:50:87:e1:a5:42:82:06:30:55:29:87:d5:
                    85:62:7f:bc:4b:dc:16:c1:fd:55:6d:b8:e5:56:7b:
                    fc:0b:ac:7b:56:be:bb:49:47:67:b5:57:b0:a0:0c:
                    52:86:f8:76:25:b8:a6:f0:d9:68:d5:e3:0f:17:89:
                    22:f9:b6:ae:75:4c:3f:33:cb:f7:c5:96:43:3b:c9:
                    8e:bc:57:09:ab:94:f2:60:a9:ee:1d:c0:2c:34:16:
                    bf:f6:98:2f:4a:fa:46:b3:7f:1f:a6:6c:de:b5:12:
                    62:df:c6:af:cd:01:a8:4b:c6:40:ac:21:4f:d8:29:
                    3f:c5:78:42:0d:6f:e5:41:eb:f0:e3:57:45:c4:08:
                    cb:fa:b1:f2:a3:4b:4c:0c:6e:cc:dd:5c:89:8e:2a:
                    15:f6:dc:a0:12:4f:63:f6:3f:51:eb:45:de:bd:9d:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:00:27:7F:9A:34:6E:1C:66:63:D1:33:A3:61:F2:4A:85:33:D3:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:e1:9f:0a:bb:bf:3e:88:a4:fe:b2:89:17:42:94:b8:af:
         f6:8e:4b:e8:eb:41:26:99:44:13:a0:5b:54:9b:55:2a:a3:0e:
         c0:83:67:14:7e:2a:61:a4:7e:17:99:8c:f5:1d:03:4f:78:4e:
         41:25:a9:3a:3b:81:2f:d9:03:2c:a8:a1:9c:fd:e1:48:cc:90:
         a6:10:b1:b4:9d:98:71:e6:25:9c:66:80:ad:ab:fd:13:64:5b:
         a2:0a:a9:3a:9a:2d:54:98:41:dc:68:2c:88:ae:bc:24:03:47:
         d7:a6:c5:33:f8:58:f2:af:d7:83:41:f1:2d:e5:ed:98:30:eb:
         fd:9f:63:82:23:86:4e:ec:3b:c2:80:8f:ef:b9:4f:8a:ef:b1:
         7c:df:59:e4:00:1c:10:cd:9e:0e:6f:d6:dd:34:d7:e0:f0:b0:
         ac:4a:c7:15:16:73:0f:78:8c:f8:f2:0e:7d:70:b7:09:50:58:
         8b:e1:d4:6a:fb:79:33:99:4e:48:b1:73:7d:15:ba:a1:c8:77:
         c0:df:0b:82:51:ba:26:02:01:db:b2:de:3e:a5:89:ca:b1:f4:
         0c:48:8f:c2:59:06:a3:45:92:15:46:ef:9a:65:00:73:40:20:
         f2:ba:75:e3:99:69:af:90:68:95:7e:2f:bc:55:6c:e9:94:85:
         9c:3f:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:40 2025 by rpki-client