Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ee95eef2-d9e2-371e-a879-e1f6c97e6b50.roa
File:                     ee95eef2-d9e2-371e-a879-e1f6c97e6b50.roa (raw, json)
Hash identifier:          RmzfA1FqiBMuLviMg5zUxAmQCKOcaGkmqsAx6glh/kM=
Subject key identifier:   12:E8:02:76:50:8E:F1:7A:2D:05:39:F1:5D:C8:51:64:45:7C:38:51
Certificate issuer:       /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
Certificate serial:       010D0C9F4328584B2E5C4C4D6E32BA1946094480
Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ee95eef2-d9e2-371e-a879-e1f6c97e6b50.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     40676
IP address blocks:        205.236.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4c:4d:6e:32:ba:19:46:09:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=7c4ffd9d-eb77-4243-b409-dcc9f1f92a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:f3:4f:83:bc:57:cb:20:c6:7b:27:87:b9:
                    e8:02:1c:dc:0e:0a:77:76:0b:55:54:14:a5:93:b9:
                    a2:ae:48:df:2d:a8:f0:ed:bf:7e:30:8b:69:45:cb:
                    b9:11:78:20:83:7e:eb:20:4a:6f:49:f9:54:3d:ef:
                    09:b3:e8:a0:24:2d:7d:d6:a4:7b:6e:b8:cf:2d:e3:
                    11:68:be:e2:66:32:d3:d5:7b:e3:0e:3e:a7:45:10:
                    47:ae:3a:b4:4e:18:29:88:70:a0:d6:c5:17:c5:c8:
                    22:66:46:8b:b6:e6:4c:bb:19:50:82:1b:7b:91:ff:
                    fa:fd:a3:5e:0b:db:16:e1:0d:4b:7c:a1:0e:0c:d2:
                    63:43:a9:a4:06:10:34:09:c1:66:54:d3:da:4a:11:
                    f9:1a:2e:29:cf:c4:b3:48:10:c9:88:c7:ed:87:54:
                    c0:20:f1:d8:80:a6:8a:79:b9:00:14:bf:81:9e:6f:
                    11:15:c6:cf:6c:f9:43:e9:7b:3f:17:47:03:c0:92:
                    86:81:00:12:10:39:39:fd:c1:82:b3:ab:a1:6b:7f:
                    46:5f:4d:97:39:a9:81:37:07:bf:ba:5f:5a:aa:f1:
                    5c:53:8b:be:2c:8a:da:25:bc:ed:3b:5b:09:81:c1:
                    ff:2d:3e:ba:cb:2a:3f:13:9f:f9:e8:7b:b6:b5:10:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E8:02:76:50:8E:F1:7A:2D:05:39:F1:5D:C8:51:64:45:7C:38:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ee95eef2-d9e2-371e-a879-e1f6c97e6b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl

            X509v3 Authority Key Identifier:
                keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:fd:ea:c1:d2:97:8c:c5:c1:b9:e6:87:9f:c4:67:68:94:
         c8:a8:8d:2a:ed:c0:eb:82:81:4f:93:d4:2e:d6:30:cb:65:c9:
         cb:e9:3d:8b:c8:6e:71:bd:91:47:39:25:2d:f5:b0:6e:25:cc:
         4a:70:49:e5:07:f8:bb:45:7c:11:4d:df:fa:30:03:b0:11:04:
         00:38:ea:5e:11:8a:6a:86:fd:2a:35:e2:74:b5:9c:24:4e:f7:
         b7:62:1f:f9:c7:f2:e7:a7:46:7d:9c:3f:60:b3:33:15:64:2b:
         5d:6b:80:58:10:18:0d:4a:67:8b:21:7f:84:56:55:9c:70:b9:
         b7:aa:59:ca:1d:ce:6e:3b:39:a8:47:8c:cf:72:fc:4b:39:49:
         da:5f:59:16:f6:ed:70:33:6f:cb:61:7b:e2:7f:8f:bf:3f:fd:
         3f:08:71:41:df:b1:16:d7:cb:b1:1b:5f:1e:20:07:d9:ce:32:
         e8:60:4c:69:e9:a9:a1:5f:1a:88:e7:d1:8f:ba:e6:05:0d:4d:
         35:21:72:ea:3c:a7:e5:48:4a:1a:20:1b:b7:d3:1b:2f:52:14:
         05:de:12:4e:f4:54:e3:15:e5:a6:5d:86:4f:b8:1c:80:4a:88:
         f0:f1:b0:48:a9:7b:98:06:c3:01:c3:a6:74:5d:af:58:78:d4:
         78:1c:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:40 2025 by rpki-client