Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa
File:                     ffe252a7-be82-3840-a7b4-e67a0052924b.roa (raw, json)
Hash identifier:          LUTHrRLlj0n3npyzoWuqZihIzjFrXvTkCY+h2gMv55U=
Subject key identifier:   6F:6E:1D:F2:09:FA:74:A4:54:A6:C6:9B:0D:BD:88:C5:8F:93:AD:73
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584B215BA811034F0E9DBBEEBB40
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa
Signing time:             Mon 08 Sep 2025 21:14:03 +0000
ROA not before:           Mon 08 Sep 2025 21:14:03 +0000
ROA not after:            Sun 07 Dec 2025 22:14:03 +0000
asID:                     31898
IP address blocks:        70.40.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:5b:a8:11:03:4f:0e:9d:bb:ee:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep  8 21:14:03 2025 GMT
            Not After : Dec  7 22:14:03 2025 GMT
        Subject: CN=772685b8-0b4f-4795-8f99-656b25a55518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:c9:ec:e3:1c:19:2d:9b:13:a5:39:09:28:
                    aa:af:0f:ca:ba:70:7e:9e:c3:8a:73:ce:94:ba:1d:
                    60:b4:bf:a8:e6:ec:fe:25:69:eb:df:3e:80:be:a8:
                    89:c6:80:4a:9a:0a:79:0c:39:c0:c4:fa:9b:b5:3b:
                    ee:ce:de:8f:df:98:fd:8c:21:c6:f5:99:a4:c3:70:
                    f6:91:31:57:1f:11:4a:28:02:a6:42:d9:c6:38:a4:
                    05:3b:1b:d6:bb:4b:88:2a:34:3f:71:d5:7f:12:4c:
                    b1:b8:b4:1c:d8:56:9f:9b:f3:8c:fe:cc:e6:c1:09:
                    58:da:85:fe:dc:c1:02:fa:a9:39:be:10:68:8a:85:
                    a3:46:f7:42:49:2c:29:c9:f0:4d:26:22:8f:8d:73:
                    96:ba:ed:b5:db:78:96:54:e8:d5:7a:bf:c3:c7:ba:
                    08:b3:02:23:da:f5:04:cf:a4:62:81:d6:4b:4c:34:
                    5b:55:bd:e6:8c:dd:01:02:0e:14:08:b7:66:47:bf:
                    5e:a2:c8:e7:62:db:fb:fb:e1:2f:6d:28:b0:a2:b2:
                    13:00:c1:08:dc:4b:2a:72:00:6a:8e:56:da:a4:e5:
                    22:80:98:4a:34:88:f1:03:5d:d2:17:6b:4c:12:b9:
                    0c:c9:a1:2d:0f:d9:16:6e:58:43:18:87:a8:97:27:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6E:1D:F2:09:FA:74:A4:54:A6:C6:9B:0D:BD:88:C5:8F:93:AD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/ffe252a7-be82-3840-a7b4-e67a0052924b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:3c:88:29:9e:8a:28:01:78:20:fd:fd:d4:40:7c:1c:b5:
         f3:30:49:09:4c:d0:39:31:1d:96:27:73:1b:f8:90:11:fc:32:
         49:d8:8b:62:9f:9f:9d:f7:93:1b:84:76:22:e6:21:1a:8c:8f:
         d0:ff:ae:d0:0e:08:1c:85:0f:0b:0b:ce:43:59:83:dd:31:2c:
         85:e0:72:59:be:3b:ca:df:d8:a3:dc:59:f5:e1:80:65:65:ee:
         bf:d7:56:48:ac:e0:3c:c5:0f:8b:47:a4:ae:f9:05:f5:7d:05:
         30:7b:e5:e9:2b:5c:0a:ff:c6:10:7e:fa:cb:62:b8:cc:6a:32:
         10:05:a1:9b:fd:73:73:91:5a:fe:1b:71:59:e2:e2:6b:14:94:
         bb:db:91:eb:9d:55:6d:09:9f:ef:e1:13:6a:5c:7d:71:5f:18:
         35:24:1c:02:e1:30:49:fb:fe:91:fb:76:5b:54:f9:bb:77:51:
         40:af:f2:4c:26:19:33:18:04:35:c8:aa:fc:5a:07:82:ac:cf:
         20:99:a7:7d:21:64:63:2e:f0:53:85:d1:67:e0:5c:9f:01:0e:
         f6:ba:f6:08:0e:ea:6c:49:29:53:c4:b6:67:7f:ed:a7:e2:f2:
         30:0a:17:d8:9c:27:53:86:71:70:18:28:9e:50:75:74:96:59:
         ae:73:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:59:16 2025 by rpki-client