Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
File:                     1fc2f9c1-18b2-3364-9d9a-02587108c597.roa (raw, json)
Hash identifier:          yJp1sMOLjnOx1+LJW5JkGKxtqkStbYm5uEGXwGv1EvA=
Subject key identifier:   13:B1:A6:A7:3C:49:63:FD:39:8A:AC:6F:CC:7E:10:C2:CF:B1:BA:59
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F4328584B3DB702FB5C0CE6B2D321A100
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     62802
IP address blocks:        170.4.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:02:fb:5c:0c:e6:b2:d3:21:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=4501909c-6576-46ed-ae05-684ba9d3bf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:62:40:fb:e9:c3:b8:de:b7:85:41:8e:93:
                    e3:b2:dc:d4:93:0d:cf:37:01:6f:37:85:ef:31:fd:
                    c9:e3:3d:c9:3e:57:f6:8b:4f:29:23:32:fd:ff:13:
                    99:5a:3f:6d:51:95:5c:d4:e3:92:2b:63:1f:5d:5a:
                    09:67:34:ff:01:d5:11:5b:fd:b8:e3:a5:dd:26:a3:
                    23:e8:3d:2d:e9:4a:91:7c:81:99:33:cb:ba:b8:aa:
                    05:e8:ff:69:ed:bf:db:6e:48:19:8a:2b:c1:15:5b:
                    f4:2d:41:9b:64:ec:23:cf:6f:27:66:61:42:c6:26:
                    5d:09:32:42:21:b6:0e:d1:62:55:57:16:7b:1c:39:
                    91:80:f8:49:04:86:7f:1d:b2:ce:a8:dd:0c:bc:63:
                    fd:28:55:7b:0d:95:2e:0b:5f:d1:7d:26:6a:d2:47:
                    19:86:38:eb:1a:bb:8c:8a:dd:73:98:c9:28:4f:5f:
                    c7:4f:95:34:b8:97:07:2a:02:9b:0f:24:a7:84:45:
                    7f:d2:90:cc:39:30:5f:95:d5:fa:e6:56:27:8b:29:
                    34:28:9e:6b:d6:a0:4f:3c:2f:ed:1d:e0:55:e6:da:
                    f6:68:7d:e4:8b:c3:b5:d5:25:90:13:d5:02:04:ad:
                    5c:45:96:2b:fa:a2:87:33:ed:de:54:b0:56:36:50:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B1:A6:A7:3C:49:63:FD:39:8A:AC:6F:CC:7E:10:C2:CF:B1:BA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b1:72:f8:18:ae:3d:30:d4:6e:99:4d:0d:2c:fd:ab:b0:3e:
         3b:ae:f7:e0:bd:a1:36:88:37:ce:f8:88:87:af:22:c9:4f:1a:
         dc:74:56:62:00:70:9e:a9:4b:55:1f:e4:b0:10:0d:61:af:3e:
         93:63:45:0c:09:09:cd:6b:5a:a0:99:0c:5e:b3:3d:e7:e6:84:
         2e:33:75:e6:91:01:0c:63:6b:75:05:92:2e:5d:3f:78:02:73:
         a3:6a:85:7e:7b:6a:db:5e:d9:f1:da:f2:53:35:9c:ba:de:8b:
         e9:cc:a5:26:78:a5:50:a3:f7:ec:f8:71:4a:c6:fe:f8:a4:0e:
         cb:c4:89:c9:78:cd:b5:0c:dc:15:5e:f8:53:04:d8:db:54:21:
         a7:e9:39:24:4b:87:09:e2:d4:2d:9a:a7:30:6d:63:18:5a:57:
         14:fb:c5:5f:36:f5:1e:ea:e7:6f:8f:30:36:6e:91:1f:13:2f:
         be:f4:b1:6c:9c:8b:4e:99:97:15:6c:a0:ef:d7:2c:51:91:00:
         4f:b0:ee:63:d9:e7:38:e7:13:70:29:f9:fa:b5:ac:2f:d0:36:
         65:6a:25:95:22:53:37:6a:df:42:27:08:c0:7e:11:93:af:96:
         98:88:cd:fd:a9:c9:fc:f5:69:d2:40:40:52:39:ea:b1:7a:7b:
         c6:e3:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:54:49 2025 by rpki-client