Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
File:                     625ea671-b6e5-3995-8461-56bd63465e40.roa (raw, json)
Hash identifier:          wO+8xGhH1Prk3laQVUfl/o2/ZY+9e5g4bsUFc3/Yve0=
Subject key identifier:   FD:15:D9:92:2F:D9:29:CA:4F:EA:62:45:BE:2B:19:1C:1A:02:4A:3F
Certificate issuer:       /CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
Certificate serial:       010D0C9F4328584B2CF6DB83E20195D911FA6AB8
Authority key identifier: 3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     395485
IP address blocks:        198.179.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:db:83:e2:01:95:d9:11:fa:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=5f657244-9387-41ea-ad20-83944e55d014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:98:8a:4b:ae:d2:10:92:e6:71:94:cb:9e:
                    0b:d7:e4:2e:09:1b:cf:c5:93:8b:e9:2d:d2:e5:8a:
                    f4:5e:fc:74:b2:09:8c:c1:d6:98:82:dd:a9:0b:8a:
                    db:0d:0e:e1:79:f4:76:47:47:3d:4d:ec:27:13:89:
                    3d:d9:15:da:8e:56:4e:d9:8e:69:8b:9f:cc:eb:c4:
                    f1:14:15:fe:73:97:42:6a:7d:94:7a:f7:eb:37:71:
                    0d:4e:18:90:de:2d:4a:d8:3b:80:92:c1:f0:ff:99:
                    fb:e5:71:7e:4f:a0:03:5c:7b:55:2f:2e:a4:cd:2c:
                    82:07:e5:ae:7e:47:e0:9d:59:49:68:b2:00:29:ea:
                    67:3f:32:8c:88:c5:85:b7:9d:d1:d0:36:cc:da:ed:
                    75:63:f8:ca:d7:1a:53:e3:23:db:fb:aa:e1:3d:d1:
                    77:f1:04:78:4f:26:9d:f7:27:24:50:d4:7c:4b:19:
                    a1:31:d6:3b:78:52:0a:6d:4b:06:32:7a:35:ae:9e:
                    8b:b0:e2:29:c1:0a:17:83:37:a4:26:4a:e5:98:29:
                    01:e1:8f:06:8f:0e:f3:c7:e0:11:20:ae:ec:92:9e:
                    8e:1b:b0:6d:df:bf:a7:b1:f4:a0:82:83:88:b7:0b:
                    59:29:bf:03:61:f2:f9:1b:6d:2f:d3:da:c7:d0:24:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:D9:92:2F:D9:29:CA:4F:EA:62:45:BE:2B:19:1C:1A:02:4A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:93:67:7a:81:4f:15:6c:e7:77:c0:25:d9:74:ed:92:15:ce:
         85:d4:07:6d:ad:92:43:9a:8f:f0:bb:88:5e:1f:86:6d:55:cd:
         b0:9f:79:6d:2c:ff:6e:d1:e6:ca:2a:49:82:a1:9e:71:6e:0f:
         20:aa:0f:fa:e1:d2:8b:55:fc:ea:9a:39:11:ab:3f:ee:8b:d0:
         db:0f:f2:c2:4f:f3:1e:d3:3f:94:37:2c:21:49:b6:62:d7:7c:
         8c:7d:6c:c6:67:9b:18:a5:aa:d2:63:90:1f:9f:1d:09:44:8c:
         83:4f:d5:94:81:bf:42:f3:ff:17:56:cc:39:c8:d5:cb:c5:0b:
         71:78:5d:c6:60:9d:6b:f6:d9:1f:21:f9:4a:f5:ea:b4:41:50:
         de:73:7d:55:4e:b0:d7:55:59:d2:fa:c4:7b:09:14:b7:3d:2b:
         2e:d0:90:53:9b:e0:1e:be:2f:08:87:ac:fa:50:1c:b1:6c:57:
         2e:f0:35:92:90:b8:08:42:7a:d8:67:e1:a9:d8:14:6e:f5:a6:
         1a:54:e0:3d:bd:ba:0f:27:ad:34:03:c7:e3:f6:a0:f2:7b:6e:
         df:52:d1:64:c9:cd:70:3b:28:7f:d8:45:8c:e6:cf:49:74:e4:
         a6:6e:55:03:00:1d:f0:4f:bb:d3:35:d5:5a:16:59:9c:3c:9b:
         c0:33:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:14 2025 by rpki-client