Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7578da64-86fe-3c16-a962-016e1a27e53b.roa
File:                     7578da64-86fe-3c16-a962-016e1a27e53b.roa (raw, json)
Hash identifier:          xOggDzxwQXixC3sNbnDM9iNJ69xHq6ia2oPxMI7jB7E=
Subject key identifier:   43:FE:86:8A:7C:64:8D:3A:F0:14:7B:BD:E5:39:E0:E6:3F:C9:C9:23
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B79BCC55601BFD927E606ED00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7578da64-86fe-3c16-a962-016e1a27e53b.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     393330
IP address blocks:        209.133.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c5:56:01:bf:d9:27:e6:06:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=ccf51f1d-35d0-4f7e-a855-77e3b4d56cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:25:db:5a:cd:7a:a2:0e:72:9a:23:1a:bd:
                    8d:d3:d8:75:3d:5f:25:ad:16:18:5b:bf:06:a0:12:
                    45:e5:49:fe:d2:9f:1d:61:ad:9d:23:d4:52:21:00:
                    05:14:07:81:8a:e8:89:83:90:82:e0:62:dc:60:22:
                    94:90:8e:2e:5b:63:b7:0e:68:db:b8:3d:9c:69:9c:
                    48:72:38:a1:9b:1b:24:cf:63:c2:62:02:8b:4b:12:
                    56:9b:e0:9e:00:6d:37:48:cf:93:04:95:80:bb:1d:
                    19:5c:06:e3:e0:93:ff:c7:56:82:f6:30:1f:ab:61:
                    51:85:ee:52:39:da:9c:9d:32:16:37:93:c7:e4:d8:
                    38:10:11:53:ab:26:00:ad:42:92:32:a5:f6:64:f8:
                    85:54:d6:fe:62:60:e8:22:42:10:dd:d9:6f:09:3b:
                    8c:be:60:9a:fb:f1:bf:38:17:3f:31:c9:36:aa:ee:
                    8c:0c:52:ab:a4:39:7e:5c:95:91:96:94:7e:f9:ea:
                    22:d9:cc:f6:d2:10:49:61:cb:e9:2c:8c:93:d2:af:
                    9d:36:a0:19:b5:42:62:6c:27:60:94:29:9f:70:58:
                    4e:2c:2d:26:fc:90:35:4e:66:cb:14:89:e2:eb:81:
                    bd:92:d1:d3:9d:87:23:ed:75:22:15:51:58:03:d2:
                    89:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FE:86:8A:7C:64:8D:3A:F0:14:7B:BD:E5:39:E0:E6:3F:C9:C9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7578da64-86fe-3c16-a962-016e1a27e53b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:e6:d7:9d:9c:0b:f6:d9:1b:16:28:d4:1d:e6:39:9a:ab:01:
         75:00:9e:0d:01:94:a1:2b:14:6d:d9:06:a9:ee:48:26:71:14:
         6f:43:b9:59:46:6d:f2:7c:20:c1:a7:ba:4b:d9:42:af:28:03:
         2c:db:cc:07:7a:67:aa:54:00:60:ca:dc:05:49:59:1f:b2:f8:
         72:38:e0:b7:59:55:80:6e:4a:29:25:8e:b8:e6:fc:4b:9c:78:
         fe:63:37:0a:ea:98:db:8b:7c:64:18:eb:74:fd:7f:82:ba:90:
         65:be:97:fe:20:aa:b4:ac:62:3a:75:b0:a3:c9:a6:b8:ab:14:
         2b:47:8d:38:04:d8:8e:05:fc:24:99:b6:a6:cc:8e:fe:99:88:
         ff:d2:eb:97:99:b5:62:33:b3:e1:1b:62:3c:7d:6f:4c:ef:fb:
         24:70:6a:f0:4e:7e:84:05:22:62:d9:6d:a4:f2:4e:82:a0:d1:
         f2:22:a8:a0:f9:9c:e4:1a:ca:ad:7e:fe:0c:cb:e5:2c:c2:64:
         2a:fb:2e:01:14:af:f9:50:4e:39:e1:f4:25:75:56:80:dd:6d:
         1a:1c:57:a5:d2:e1:ba:72:cf:07:70:9d:1a:dc:15:67:5b:f2:
         b0:c2:1e:bc:02:84:bb:3f:de:1c:94:2a:65:ac:f7:f6:5d:75:
         37:13:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:12 2025 by rpki-client