Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
File:                     7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa (raw, json)
Hash identifier:          gtFFT5f7WYApqxmpuqcc7+Lg5ScETXJxfg5lI5ikZKI=
Subject key identifier:   DD:8B:4B:27:C7:18:99:3C:1C:03:76:BF:54:D4:8F:69:EE:48:56:98
Certificate issuer:       /CN=69e23836-98b5-4802-9778-a96a5ee3eac3
Certificate serial:       010D0C9F4328584B047C0669B86B98ED280FA240
Authority key identifier: F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        198.47.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:06:69:b8:6b:98:ed:28:0f:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e23836-98b5-4802-9778-a96a5ee3eac3
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=6d6b4058-f388-47de-8efe-c98c9ce29904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:83:73:c1:98:11:f4:f0:72:99:90:b0:ce:
                    ff:9d:64:cf:58:1f:fc:86:db:c9:18:02:98:77:23:
                    2a:35:92:81:1e:94:47:e9:7e:81:f0:56:ca:26:71:
                    62:ad:0e:6d:1d:98:cc:9b:9a:fe:11:46:b6:ae:b5:
                    3f:47:34:27:0b:9e:19:8d:7c:9b:53:de:b6:f3:bd:
                    e4:7a:ad:fc:7c:ac:a6:07:e2:50:e3:cb:c2:35:d4:
                    f1:dd:5c:7b:38:68:f1:e8:04:91:a3:a3:58:a5:48:
                    1e:82:9c:be:d9:07:8e:23:c3:10:af:54:a9:bb:d0:
                    47:be:76:8a:50:96:2f:25:ae:58:61:d6:0f:87:02:
                    2f:f6:88:ab:07:06:89:85:fb:7b:f4:29:56:93:fd:
                    1d:1c:1b:f1:78:25:a1:65:3f:71:09:4f:0c:99:0c:
                    69:d1:9f:a4:03:67:2e:94:00:02:85:1e:d4:eb:98:
                    93:6f:d9:c7:44:cb:ae:0c:95:e6:9e:71:f1:5d:85:
                    10:66:a7:b4:2f:dd:67:b4:64:b6:0c:2b:2a:06:9e:
                    e3:e5:6e:1a:aa:cb:d0:45:4f:70:61:47:37:35:3b:
                    c4:6a:a7:13:1e:63:bb:a1:47:ea:2b:04:ef:53:17:
                    71:61:e7:69:3a:9c:4a:ff:b3:68:6f:2a:13:0f:63:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8B:4B:27:C7:18:99:3C:1C:03:76:BF:54:D4:8F:69:EE:48:56:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl

            X509v3 Authority Key Identifier:
                keyid:F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:f2:c3:24:16:6b:6b:97:e0:96:43:73:e4:bc:0e:a4:a8:08:
         a4:d8:e2:a3:a1:6c:4e:64:ff:68:25:b3:9e:56:20:55:fa:1f:
         8f:4e:bf:a2:8b:6e:ad:2c:32:29:12:37:cd:a8:f9:f8:2e:48:
         ff:76:7f:63:77:a2:0c:82:5a:9f:b0:83:8f:b4:ad:7c:4e:17:
         99:e3:2d:0f:71:7c:3c:91:71:a0:9e:ca:87:0a:17:f2:8d:3a:
         00:dd:8c:49:a0:23:8c:0f:d4:a7:7c:0f:9c:f9:c0:1c:d5:61:
         f0:f6:0e:c0:bf:e7:50:e4:75:2f:19:ed:35:cf:67:48:e6:5b:
         6d:a0:48:91:5e:20:72:ed:f7:b0:72:10:7b:1e:dc:e7:1c:dd:
         e3:29:23:64:ad:60:2a:28:40:00:73:97:03:30:78:9a:08:48:
         01:68:fd:4d:d4:df:fe:b8:22:89:b4:4a:ac:ba:c1:ea:c4:4e:
         92:52:1a:33:9d:d2:cc:2a:f4:1f:fb:8a:36:8e:9b:87:3a:ad:
         fa:5d:35:45:e8:25:1a:bb:e4:f4:14:7a:46:8b:5e:0b:82:33:
         70:29:c3:1c:90:76:d7:bc:c1:b3:3c:03:0d:0c:d6:f0:33:fb:
         9f:87:c8:54:dc:bc:30:c2:20:22:e5:59:e7:44:31:5b:e4:a9:
         cb:c7:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:31:46 2025 by rpki-client