Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
File:                     f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa (raw, json)
Hash identifier:          ubn6j67An6w6fOWuag72LB/v/4lg/3/BRzw5kBH83EE=
Subject key identifier:   1F:CF:9A:04:D7:5C:95:35:C4:D3:1C:37:BF:59:AB:44:0B:9A:39:F3
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584B13D6C54A1EAF4C2F86287300
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        170.110.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c5:4a:1e:af:4c:2f:86:28:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=750658f4-c027-432a-9287-9451d8cba426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:38:6c:f3:36:f8:17:66:22:4d:07:eb:bd:
                    93:c8:77:f1:1a:5b:5b:77:2c:ab:08:eb:8d:43:38:
                    f3:db:0a:20:f8:05:73:a5:08:bd:a4:09:1f:09:c8:
                    1b:a2:7e:47:a7:66:67:6c:08:63:30:aa:59:17:27:
                    41:64:96:22:c8:cf:ef:71:55:8d:ee:ae:8e:fb:a2:
                    e7:da:14:d9:13:78:e7:9d:fa:ac:7a:56:8a:36:67:
                    95:4c:d9:41:a8:13:59:c8:9f:19:7d:0e:1e:18:a1:
                    5a:26:e5:0a:b5:a5:1e:9e:c6:ae:c5:cb:32:7e:c9:
                    78:19:a5:3e:6c:88:00:50:e0:59:eb:50:2f:a1:cb:
                    17:42:af:b0:94:b4:dc:da:c6:c4:4d:b8:ae:0a:e4:
                    44:61:07:3a:75:83:db:04:53:fd:2d:e7:cf:42:37:
                    26:f1:c8:0a:4e:e4:12:e2:c9:4f:5e:7d:9f:07:72:
                    17:24:4d:87:f5:70:78:8e:2e:4f:13:be:97:5c:90:
                    84:d8:a2:0e:3f:dc:74:57:d9:42:3c:96:44:67:92:
                    7c:e5:17:17:4a:31:19:f5:03:80:90:b9:52:b9:36:
                    cf:05:18:63:12:ee:44:78:34:10:e3:37:73:d3:b6:
                    b9:43:e6:f8:39:68:e6:5f:7a:44:35:b7:bc:eb:d6:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:9A:04:D7:5C:95:35:C4:D3:1C:37:BF:59:AB:44:0B:9A:39:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:ae:66:87:a7:5d:aa:84:b7:36:9c:76:90:d4:4b:72:d3:
         26:9a:36:fd:07:02:13:4a:e8:ea:d1:86:2e:f4:1b:4d:2b:12:
         3f:c3:0e:4e:7f:67:4e:17:90:f4:f1:a8:0a:65:a3:98:71:ee:
         55:b8:ec:f2:2b:ae:a8:a2:b9:29:aa:8a:1f:ba:b2:98:d4:d4:
         e3:cd:f6:75:72:46:50:4e:94:44:1f:f6:f6:c2:58:9b:f7:a1:
         e8:2e:41:33:f4:bf:1d:80:d6:af:3e:fc:94:a4:03:30:a9:5c:
         8c:92:73:ea:ad:9f:25:6e:67:22:85:70:83:48:dc:c2:15:a1:
         a2:f7:1c:df:7e:a5:d7:5f:45:b3:76:d9:9c:10:0c:61:aa:39:
         c3:7d:ca:49:68:d8:2b:f1:eb:c4:32:b1:c8:dc:8e:e2:4c:f5:
         a8:84:79:eb:d7:f1:f0:08:9c:d4:ab:0b:c3:3c:53:12:e1:71:
         d8:30:2c:ab:a7:cf:33:eb:56:2b:65:7f:b1:b1:fc:5a:f4:f9:
         51:53:8a:8b:a1:17:14:51:ac:a7:ae:5b:ff:63:ce:68:2f:22:
         72:a2:11:d4:38:dd:94:35:36:44:8e:f9:63:dd:aa:03:0d:c0:
         fe:87:a6:e6:71:5b:fb:de:aa:83:4e:f8:d7:29:be:f4:ad:aa:
         ac:d3:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:16:12 2025 by rpki-client