Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/57301ec8-5f58-39f2-81d2-482a11e23a9d.roa
File:                     57301ec8-5f58-39f2-81d2-482a11e23a9d.roa (raw, json)
Hash identifier:          D3drBytDasRBoIVCcOVLk2wUyzXMKgxrWvZLESMtT88=
Subject key identifier:   EA:90:0E:F0:58:1B:65:F7:91:FE:BD:3C:5D:DC:C6:F4:A3:EB:B8:B1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B63A3EED48A336C6621B5C8B0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/57301ec8-5f58-39f2-81d2-482a11e23a9d.roa
Signing time:             Thu 02 Oct 2025 15:03:02 +0000
ROA not before:           Thu 02 Oct 2025 15:03:02 +0000
ROA not after:            Wed 31 Dec 2025 16:03:02 +0000
asID:                     23473
IP address blocks:        104.145.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:a3:ee:d4:8a:33:6c:66:21:b5:c8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 15:03:02 2025 GMT
            Not After : Dec 31 16:03:02 2025 GMT
        Subject: CN=e003cefb-797d-4aa0-8b80-172c2455304d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:04:31:ba:6e:d4:64:f0:e8:36:a9:91:2c:
                    7d:90:19:db:71:0e:87:3b:15:24:c5:3a:f4:1f:1d:
                    fd:80:cf:92:b5:41:2d:f4:e9:60:d8:56:67:d2:2f:
                    a0:10:73:7d:e0:ba:bf:6e:d5:2f:ae:36:9c:65:56:
                    ff:72:a9:50:35:96:1a:d5:fa:3a:12:e7:51:77:7a:
                    fc:4c:5b:a1:a0:2e:c2:65:0d:d9:5c:35:1e:1e:26:
                    e1:18:f4:9a:c4:c2:21:da:13:4d:26:45:84:11:fc:
                    b0:8a:95:9b:65:4e:e9:c6:79:34:ae:92:7b:4d:7c:
                    65:4d:28:1f:4f:56:2b:30:4b:e0:c9:fd:59:9f:a8:
                    3b:b7:a3:b4:b5:b7:b6:b5:d0:79:86:b7:67:de:a9:
                    d8:97:cc:72:44:f0:b6:01:cf:dd:70:50:8b:6f:38:
                    f5:11:e1:17:08:f9:e1:9b:1e:43:88:56:8d:75:5d:
                    02:e3:e5:cd:0d:45:2b:9b:f8:cd:29:40:82:9f:39:
                    34:95:c5:8e:b7:e7:92:f7:38:0c:ac:e1:b8:5a:5b:
                    0b:20:69:1a:72:f8:12:dd:e5:d8:8b:51:da:0b:2e:
                    06:e5:29:9e:35:0f:cc:4d:84:e5:33:20:99:f0:09:
                    02:7b:29:1d:1f:94:62:fd:ef:dd:21:e6:e3:4f:b6:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:0E:F0:58:1B:65:F7:91:FE:BD:3C:5D:DC:C6:F4:A3:EB:B8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/57301ec8-5f58-39f2-81d2-482a11e23a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:9f:8a:7f:74:c1:f3:e9:be:ab:d2:8c:07:d0:81:65:53:
         7e:84:0c:37:8e:4a:ba:c6:dd:bc:f0:9c:2c:b7:4f:2d:44:bc:
         60:f3:48:93:97:0b:31:42:b5:5e:d1:38:08:0b:24:6f:81:8c:
         c7:10:03:f0:a9:21:4e:e5:2b:31:b1:e4:4c:19:62:da:7d:b7:
         2d:5d:97:9e:1e:7e:fd:cc:ac:d3:40:da:56:93:18:33:0c:23:
         bc:f6:1d:33:37:f4:61:2b:e0:ad:38:28:70:26:c4:d3:03:bb:
         0b:4c:51:a5:90:cf:00:bd:b7:60:f9:4f:d1:1a:e1:d3:a5:0d:
         80:b7:86:d5:85:48:62:62:9a:ba:c3:01:41:67:e8:df:e6:e7:
         1c:0a:dc:aa:51:c2:91:c5:13:15:2b:2a:d1:9f:eb:ee:f7:21:
         b1:be:7f:8b:96:d3:ad:67:58:d3:1a:c6:86:86:d7:54:6b:fe:
         52:71:92:cc:e1:14:28:5b:3b:2d:ca:fa:2c:79:e2:27:40:0c:
         d2:c2:7c:33:68:61:50:cd:87:c0:0e:00:c6:e2:89:cf:e7:45:
         94:27:56:4f:23:b2:ce:bd:90:6f:89:26:65:72:71:31:b1:5b:
         0f:a8:21:a3:df:62:ab:26:de:6f:92:49:cc:6c:a4:29:e9:53:
         ed:14:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:39 2025 by rpki-client