Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa
File:                     91aaccaf-f050-3f69-9e66-2f8cb643c659.roa (raw, json)
Hash identifier:          BValU03ArREfczpW8OY5kIw8LVIzIvt0OIexG82qLDs=
Subject key identifier:   D3:49:C9:5E:DF:95:4C:F1:D1:D5:64:E4:BC:DB:C7:EE:A2:89:68:19
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B6631F7D200A1D5A5AABC6380
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     3561
IP address blocks:        208.159.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f7:d2:00:a1:d5:a5:aa:bc:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=da2306ec-32dc-46af-8709-1c2d5c4ea7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:60:49:1e:a6:fe:ee:a1:5d:f4:26:24:ff:
                    1a:6a:ff:f8:fd:83:f7:9a:d7:e0:5c:57:ba:f9:26:
                    35:b0:15:16:ef:6f:75:5d:f0:4f:82:55:bd:0f:31:
                    05:7d:e0:dc:3f:62:08:89:38:54:35:9a:6e:a4:f8:
                    a9:ba:83:25:3b:db:02:91:ec:1b:f9:89:59:00:10:
                    58:d6:4e:4f:b5:f1:3a:f8:3d:5e:5c:56:6f:ff:d1:
                    31:ba:61:48:76:70:72:f7:4b:a6:75:e9:65:96:7f:
                    ec:3e:b8:4d:3e:69:5a:04:db:e1:de:96:aa:ed:e2:
                    1c:54:54:22:a8:48:8f:b7:e8:dd:e2:c4:96:ef:a9:
                    22:8a:e1:ab:bd:a5:41:ea:70:6a:a2:f2:88:e4:7f:
                    2e:e9:e7:9e:2c:30:06:b3:be:f8:8f:b2:51:e1:2b:
                    dd:e1:2e:53:9f:ef:59:6b:47:ba:f3:d7:4b:6c:ed:
                    e7:ca:8a:f8:b6:8f:ee:99:65:33:d5:aa:4d:80:ec:
                    3e:82:76:89:f2:f0:30:30:80:4f:9e:c5:7d:ca:89:
                    02:9a:1a:1d:51:b4:7b:08:9d:66:c9:c7:3d:f3:b2:
                    eb:98:68:39:ff:b6:c6:40:3e:db:75:1a:a6:1b:10:
                    33:60:4d:fc:3e:bb:d9:b8:89:f7:ce:51:a9:af:7a:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:49:C9:5E:DF:95:4C:F1:D1:D5:64:E4:BC:DB:C7:EE:A2:89:68:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.159.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:fd:7c:e5:98:8a:b6:76:e3:23:47:b3:a9:b2:da:85:85:
         b1:d9:13:f8:ab:5c:89:53:3d:c1:49:68:76:82:87:35:9e:0a:
         ee:33:db:3b:72:f9:86:e6:86:0a:40:d7:83:4f:c9:b9:eb:b5:
         4b:42:c1:b9:dc:ac:8b:d9:c5:02:d4:85:d9:42:1f:2b:71:d1:
         07:6c:da:c4:41:06:7b:03:8f:51:c7:b8:3f:c1:87:40:27:6e:
         16:fc:51:ca:eb:96:a8:8d:3f:82:37:93:a5:e0:17:41:f9:73:
         0f:96:1c:e2:f6:ff:e8:9e:b7:b6:61:34:c5:89:5a:c8:24:03:
         1e:b0:1c:20:ad:5a:bb:48:dd:28:10:fd:75:60:fc:f2:bb:6e:
         fb:a6:37:6c:b3:12:0d:28:7d:0c:63:b3:e9:9a:5c:05:5d:ae:
         47:0f:c8:10:69:7b:46:78:5c:b6:bf:08:0f:84:5e:4e:66:42:
         ad:f3:d2:e9:eb:3b:7b:06:b4:86:1e:35:c9:43:84:5c:ef:0c:
         23:0f:26:22:38:5c:f1:58:42:2b:e9:4f:16:b3:32:b9:84:ff:
         a5:ee:b5:c4:54:b5:b8:b5:f2:2a:ba:b7:bc:7f:92:6a:eb:21:
         73:8b:14:81:ef:7c:99:32:71:61:b7:e9:f3:25:91:5b:61:a8:
         8c:7d:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:35:14 2025 by rpki-client