Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d43bf094-af1f-3579-bff7-0285f62d92ed.roa
File:                     d43bf094-af1f-3579-bff7-0285f62d92ed.roa (raw, json)
Hash identifier:          COAokC5qbmiNP0EX0piEUGWjxXKXxJ1mU+2mGqncCNg=
Subject key identifier:   E0:C8:40:BF:0E:8B:14:3F:B2:8B:7E:36:6E:76:87:37:0D:5F:8C:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B13D6D481A1E8D8E1A7082240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d43bf094-af1f-3579-bff7-0285f62d92ed.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        168.93.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d4:81:a1:e8:d8:e1:a7:08:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=881f6251-f907-4e8c-b6d2-deb12de4c44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:55:54:af:97:b2:b6:6e:d3:85:bf:6c:76:
                    b0:65:d8:42:29:c0:a2:26:2e:f0:1b:c1:d9:66:6e:
                    90:95:8a:66:93:4a:4a:a7:ef:cd:2f:1b:4c:cf:f5:
                    d4:9e:9d:95:49:51:8a:27:62:33:30:e9:d3:67:ef:
                    7d:3e:f4:6b:9a:c1:60:78:8a:56:99:55:8b:63:e0:
                    98:4c:89:87:9f:03:c6:f0:d3:64:b6:f7:29:41:76:
                    f1:8f:35:ab:af:8a:53:55:c1:32:31:9a:76:2d:32:
                    06:dc:c5:ef:1b:ca:f7:3c:87:2d:a1:0d:dd:6b:bd:
                    e7:4f:8e:ec:58:82:9f:d4:9d:ac:61:26:ef:5f:1b:
                    44:44:5f:ee:c3:7c:dd:1f:37:d6:7c:a6:64:fe:1b:
                    6b:5a:db:f3:cc:b0:93:27:24:57:ee:18:85:24:ff:
                    c4:cd:25:6e:af:3b:9d:58:46:82:2c:69:34:b6:c1:
                    a2:af:49:b3:05:60:f5:de:96:b1:31:9d:74:0d:e2:
                    b1:19:3f:51:15:b1:6a:38:65:ee:e8:1d:59:00:6f:
                    b1:04:56:65:ec:fd:4e:73:7b:74:87:23:89:58:af:
                    6a:f1:10:18:b1:66:7e:96:f8:bb:9a:31:d4:db:ba:
                    32:bf:5e:ea:06:ed:5d:e2:a6:86:56:ad:d0:bb:97:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C8:40:BF:0E:8B:14:3F:B2:8B:7E:36:6E:76:87:37:0D:5F:8C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d43bf094-af1f-3579-bff7-0285f62d92ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:36:01:f6:c0:40:d9:82:ed:db:d2:c0:eb:be:b3:44:07:
         03:db:b7:97:4f:a9:12:68:8f:d2:87:05:ac:f6:f8:e0:ba:e3:
         89:72:1b:80:16:48:03:85:c4:81:08:07:45:c7:27:0d:79:50:
         81:f8:cd:82:19:81:2b:11:cc:39:53:52:6b:33:d6:ed:16:13:
         59:f2:dc:58:24:76:62:64:d9:2d:92:d1:6c:4e:a7:67:f6:b9:
         f7:ce:42:1a:6e:20:37:50:8a:be:79:82:3a:8e:1d:b5:34:7a:
         56:d3:01:b1:0f:5f:d7:71:25:53:1c:2b:4f:49:5e:ee:2d:d7:
         24:60:8f:8e:a4:f7:dc:26:70:21:8e:f5:b7:17:42:9f:9c:1d:
         46:46:94:13:f2:94:3b:81:5e:34:10:3f:ea:13:8d:71:8b:ac:
         e1:e5:cb:43:03:37:7b:18:34:ba:73:fe:5e:ed:a5:a2:91:c6:
         3e:14:28:99:e1:ce:a7:bb:15:7f:62:f7:8f:23:50:8b:99:1e:
         5f:33:f2:96:81:03:9a:a1:1b:ca:3b:19:c7:d3:31:08:16:44:
         bf:e8:79:79:f9:3a:88:d1:9d:9a:d2:a0:47:50:8c:53:6c:a4:
         3c:9c:89:f3:b4:91:37:34:0a:da:1b:54:c5:ab:95:3e:90:e2:
         25:4b:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:49 2025 by rpki-client