Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa
File:                     3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa (raw, json)
Hash identifier:          9BqOKqRimOn4vchBM0sqQpP/roMdCtGdsg3RrNQ+uLY=
Subject key identifier:   CA:6F:39:86:5D:13:03:40:7A:5E:0C:7D:A3:34:16:AF:37:58:48:A2
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584B64CE64AAA3A1ECB518233000
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     26037
IP address blocks:        204.209.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:64:aa:a3:a1:ec:b5:18:23:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9081e303-1fbe-4664-a937-d1e2ebcd78d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:e7:08:38:19:55:d0:7c:e2:16:8d:f0:b8:
                    9a:77:a3:5a:0a:5f:91:0c:e4:69:c1:01:c5:52:aa:
                    dd:00:1f:77:24:73:77:ee:a5:cf:37:26:6c:48:ef:
                    3d:a5:e1:d7:ea:64:1d:22:0a:ae:47:33:f2:98:68:
                    35:b1:87:b6:a2:23:79:e1:38:a6:74:73:c6:93:7d:
                    a7:ab:1e:d8:ba:f0:e5:eb:04:79:cb:ba:65:a5:aa:
                    10:06:a8:b8:88:52:3a:e7:1b:c8:36:7c:e3:80:2f:
                    52:fe:e8:35:02:47:8d:f9:42:32:d4:39:49:fb:1e:
                    4b:fb:79:3a:70:5b:2e:e1:a2:ec:7c:a8:26:d7:06:
                    b2:16:b9:cc:ec:89:59:50:f1:af:17:50:6d:44:37:
                    d8:80:65:a7:81:fa:16:58:5e:c0:81:82:a5:7a:f5:
                    65:73:99:d9:5f:30:c7:d1:dd:5d:89:fb:4f:23:ed:
                    f9:6a:13:fc:3a:a4:97:b4:ac:c5:67:f8:9c:b9:fe:
                    8c:e1:6e:b8:f1:f8:ea:18:95:fc:31:8a:9b:43:42:
                    0d:83:db:54:72:bf:31:f9:a6:eb:86:80:e0:8f:83:
                    e9:cd:d8:23:e0:9d:ae:fd:41:c8:89:03:63:ae:58:
                    97:cf:41:71:d7:e6:f8:ed:c0:ec:d4:e2:b2:4a:92:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6F:39:86:5D:13:03:40:7A:5E:0C:7D:A3:34:16:AF:37:58:48:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:03:32:77:59:84:67:71:9d:fa:99:2f:7d:1f:60:cd:ca:
         84:ae:ee:fd:e8:4a:c6:84:c0:eb:e1:b4:f0:6f:ab:d7:fc:ed:
         42:97:40:65:a3:23:71:0f:78:86:f2:a8:96:1e:bf:86:1d:e2:
         46:63:ff:3f:6a:38:07:89:97:f7:e6:23:42:70:07:25:94:71:
         f1:5a:03:e7:51:26:d5:4e:5c:b8:38:71:04:b8:8a:c6:ff:da:
         99:c0:ff:8a:54:28:d3:28:66:be:07:aa:8b:ae:90:e5:cb:9e:
         b8:95:87:bc:d6:6b:da:82:bb:72:39:d8:c4:2c:f2:25:d2:99:
         a2:3b:61:62:c1:d0:1e:b4:0c:e2:45:0f:87:b4:7c:45:97:77:
         d3:c1:15:d3:fa:b2:03:43:2f:d4:39:e5:90:1c:1f:d1:17:6a:
         e5:dc:58:53:26:08:87:b6:43:a8:60:62:e4:4f:16:ff:35:aa:
         fc:47:5f:38:cb:dc:d7:8d:3a:c4:8a:aa:42:32:81:a0:09:3f:
         3b:be:71:4e:08:bf:85:66:10:fb:b2:b6:0f:a9:96:ac:3d:a6:
         fc:02:b0:ce:ad:5d:05:7b:c7:88:e6:54:c0:f0:3e:3f:75:51:
         ab:73:14:7f:76:24:ca:3e:a4:e4:f4:40:dd:43:ce:64:99:21:
         a5:f4:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:14 2025 by rpki-client