Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17c84135-eb99-3afc-a60c-24cd16172480.roa
File:                     17c84135-eb99-3afc-a60c-24cd16172480.roa (raw, json)
Hash identifier:          bSIUSJwzGhFjJjqmfgjkfy52eyz5+03OrWez0nxzDVU=
Subject key identifier:   C3:A8:41:DB:8F:AC:50:EF:58:8E:D0:76:33:82:07:E7:ED:11:3E:34
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5BA4DC95DB92DDBD5600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17c84135-eb99-3afc-a60c-24cd16172480.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        209.146.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5b:a4:dc:95:db:92:dd:bd:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1eef870d-08fd-42ad-ace3-213db9064876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:fe:48:99:c4:7d:15:25:e2:7c:90:8e:72:
                    ca:be:f0:51:24:79:2d:17:1f:29:6e:91:b3:fe:64:
                    c5:82:0f:70:35:d0:36:4e:e6:62:d8:0e:7e:a6:0a:
                    d0:c9:75:b3:33:59:be:0b:27:aa:55:ed:ce:36:a8:
                    5b:a8:8b:17:22:bd:7b:6e:d1:0e:f6:7b:35:f7:37:
                    0d:9b:0d:3b:bc:24:bc:ba:64:08:6f:1e:72:e1:aa:
                    e8:82:9d:ca:14:7c:a2:00:e7:b2:95:81:da:8e:c0:
                    52:b6:59:bc:11:49:d4:31:e6:b0:e3:bb:4a:ef:f4:
                    93:af:27:76:79:d4:67:ca:39:52:e3:d4:fa:e2:07:
                    b5:4e:2f:43:e9:3c:1f:61:13:5d:9c:0c:da:f7:28:
                    67:84:18:ac:81:2b:42:41:18:57:9d:57:b0:aa:7d:
                    b0:0f:8b:76:d2:27:12:3a:fd:fa:ad:e3:77:54:63:
                    6d:25:4e:12:54:8c:74:68:6f:c6:c5:f3:8a:0b:5c:
                    67:4e:56:2d:b1:e6:b8:ff:12:4c:e1:d1:7c:16:86:
                    ad:d8:77:09:3b:8d:c9:5c:e7:0c:50:e6:39:e8:44:
                    99:0f:fb:fd:4a:25:8b:d6:cf:e5:5d:da:b4:62:2c:
                    c1:b0:03:7e:a6:68:37:2c:64:84:f4:44:e5:3c:6b:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:41:DB:8F:AC:50:EF:58:8E:D0:76:33:82:07:E7:ED:11:3E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17c84135-eb99-3afc-a60c-24cd16172480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:e9:b9:32:54:fd:14:34:50:c5:94:78:27:b5:66:0c:99:
         f5:49:d0:ad:aa:a6:f0:70:36:34:b1:39:87:12:a1:1f:43:93:
         82:44:63:a6:95:8d:8f:22:56:81:98:54:95:c6:b5:44:31:39:
         70:b6:72:3e:a4:94:78:ce:58:61:f7:00:85:3b:69:fd:5b:94:
         4c:95:85:35:ae:90:18:3a:ba:a1:62:45:df:f5:6d:a8:a0:03:
         28:63:77:ce:c6:0e:51:05:9a:b0:e4:5d:f7:34:31:20:54:c5:
         31:81:72:38:24:08:ae:ee:21:a9:b6:83:bf:b3:75:19:2f:bd:
         80:c5:a8:ff:1e:77:8e:bd:cb:aa:45:2f:24:9f:25:2c:83:b8:
         83:a4:b4:05:57:34:d7:a7:e8:77:d5:30:82:54:18:b2:14:f4:
         64:a7:a0:81:5d:08:b4:55:15:2d:1c:3d:b5:7b:0a:d3:90:04:
         80:05:9b:ed:bb:c3:e8:81:54:f3:45:8b:c1:be:79:f6:00:94:
         60:7c:34:42:09:20:92:1e:84:df:7e:d6:85:f5:c7:ac:7b:6f:
         61:b0:e0:f8:29:8e:15:e7:13:27:c6:05:7f:3e:77:1d:d5:53:
         c5:d6:52:8d:cf:b1:23:34:2b:49:cc:3c:f2:86:01:2a:fb:6a:
         1e:97:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:25:43 2025 by rpki-client