Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa
File:                     99c19601-626b-308f-9eb2-1104f510554f.roa (raw, json)
Hash identifier:          yk/t5z4ktHHxTx4OwwGjoBGzupT7TxxF7wfCDV1JzDY=
Subject key identifier:   87:70:89:F9:F3:CF:DC:2C:43:2A:8F:FE:54:0E:C7:4E:3A:CA:E5:76
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B41E716F36A8F643CDB1F0D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     53989
IP address blocks:        208.184.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:16:f3:6a:8f:64:3c:db:1f:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=03469c2c-3b74-4b13-b630-70a4072bbab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:1f:6b:e6:a9:eb:44:28:c5:8c:68:34:63:
                    56:e4:a6:34:c3:91:04:c1:5d:48:77:24:5d:63:02:
                    79:d3:02:01:d6:06:87:cd:b2:dd:f0:78:f3:31:b9:
                    ee:a7:bc:80:ed:f2:db:6e:0b:c9:fb:72:19:70:2f:
                    a1:8e:ca:83:96:79:c3:22:a7:3a:94:7f:f4:43:92:
                    21:7e:c9:3e:37:04:ea:27:f9:26:9c:e0:df:cd:4d:
                    ed:c6:77:4a:e2:1e:74:e3:e1:72:c5:60:d6:a5:f1:
                    7f:f8:79:db:38:d4:5d:b3:09:79:84:86:e5:cf:f7:
                    41:b1:8e:0d:63:1e:f8:66:9c:83:4c:f8:c9:88:5b:
                    ac:f5:64:2e:d5:37:40:76:55:f9:22:7e:2b:6a:b2:
                    9e:6c:61:a9:66:99:56:07:2e:a7:ba:d3:55:e3:af:
                    4e:e2:ec:ac:6b:a2:07:57:ce:45:c7:b6:8a:b2:2c:
                    2c:61:e7:f0:cb:fd:20:a4:23:c5:b3:b2:67:9a:40:
                    21:c5:f7:42:2c:31:00:2a:82:4f:c7:29:e4:2e:87:
                    0a:78:e6:a2:fe:e9:c4:ee:b2:fe:9b:50:b1:eb:62:
                    04:31:1f:52:3a:e4:9c:86:31:ff:e5:4f:e3:27:4b:
                    f9:81:07:11:d4:ff:60:46:f1:63:c1:81:0b:54:d6:
                    47:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:89:F9:F3:CF:DC:2C:43:2A:8F:FE:54:0E:C7:4E:3A:CA:E5:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/99c19601-626b-308f-9eb2-1104f510554f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:fa:f4:50:06:25:90:3c:97:64:b3:6e:d3:a7:36:cc:48:77:
         74:86:a0:e2:84:61:bb:b1:e9:0c:30:a8:af:46:f8:fb:57:7a:
         58:f4:99:07:d2:9a:ab:ab:c8:c7:bf:7e:fc:c1:41:01:bc:5e:
         e4:8e:d4:7e:5d:26:a2:9d:4e:2c:83:20:ad:84:e0:46:b7:50:
         a0:d4:e2:5d:e6:79:6a:25:eb:16:fc:74:fc:d8:d6:67:97:12:
         78:66:a8:b8:e1:1d:d8:09:a5:de:3c:56:23:16:14:e0:18:7b:
         67:fb:9f:af:40:26:4c:09:45:05:77:bc:32:89:e1:f4:d0:01:
         54:78:37:64:56:ff:da:7f:f8:57:5d:e9:1e:18:3a:d7:84:4e:
         e9:40:0e:91:a9:e9:88:da:1a:b8:46:fc:0d:c8:e1:51:40:ee:
         b7:5e:66:81:02:e4:ff:12:02:c2:fc:f3:ba:ee:3a:57:78:9c:
         68:c7:5b:c3:ee:4f:47:b3:d5:c1:56:b8:b3:a2:fe:8d:19:80:
         00:4d:74:4a:1a:81:93:08:52:84:f3:95:e5:fc:3c:de:ad:5c:
         43:8c:73:dd:cc:16:fd:4b:ed:53:76:28:63:73:78:b3:17:2b:
         a6:e1:2f:87:a4:3c:c2:5c:af:30:2b:c6:78:4f:e3:5a:a4:7f:
         e1:8d:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:36 2025 by rpki-client