Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
File:                     3654a19c-8d59-3571-9690-2f911097cca8.roa (raw, json)
Hash identifier:          q0RGJlFe/fEkyRORxKk9gVmxrEICj6yMVeAqVnaZ0JM=
Subject key identifier:   06:CE:A1:07:8D:1C:D3:5F:05:F1:87:5C:58:4B:71:97:49:6D:21:2D
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B1AD184D490F01A75B78E8A00
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:84:d4:90:f0:1a:75:b7:8e:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=06960576-f076-4ec4-adb0-f198f3c8b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:32:dd:8e:80:8e:b5:c7:2f:1d:34:a0:52:
                    6b:c2:22:bc:86:1b:60:ff:23:5d:e6:4a:40:82:54:
                    27:28:09:19:cd:f3:11:f5:2a:5a:0c:39:f1:a9:f0:
                    d7:ab:19:56:b9:fc:1c:0a:18:fc:26:c9:c6:f7:16:
                    37:e2:eb:11:d0:92:f7:b0:62:23:12:65:b1:72:fe:
                    b4:ac:92:5a:36:0e:ea:23:dd:4a:6f:03:1c:20:7e:
                    1f:45:ab:b7:c1:92:53:1a:ee:5b:84:3a:e8:35:bd:
                    ef:e1:a7:35:2f:d1:0e:b5:ea:72:98:c2:db:c2:81:
                    e6:e6:f9:7a:92:d7:1c:5f:af:70:5c:63:51:6c:0f:
                    2c:90:44:22:13:fc:92:f2:b0:d7:bb:75:a5:e2:7f:
                    1c:58:3b:e5:b9:cc:1f:cf:0d:72:d8:e1:70:c3:60:
                    17:77:bf:85:d9:0d:5f:3e:cf:76:4f:5e:57:4d:69:
                    35:f2:42:34:34:bb:1c:e1:74:bf:2c:70:be:69:2f:
                    b7:d5:31:cc:ee:e0:01:fc:eb:18:f9:22:4f:89:e7:
                    bc:0d:c8:a7:62:84:ab:6b:4d:50:76:ad:7d:6e:68:
                    69:a9:9c:ec:94:06:09:79:d9:db:d3:7d:59:46:83:
                    37:44:a0:18:f1:02:d7:c3:28:cb:a2:6e:b2:a3:05:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:A1:07:8D:1C:D3:5F:05:F1:87:5C:58:4B:71:97:49:6D:21:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/3654a19c-8d59-3571-9690-2f911097cca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:b8:d0:cf:a3:26:1d:b8:9f:4a:f3:de:78:a3:ee:87:cd:
         cc:bc:61:79:d0:51:a3:d4:a3:39:36:82:d4:03:36:08:41:ba:
         21:62:7d:54:52:16:db:93:b3:df:8a:4d:46:08:dc:96:92:b3:
         2e:16:71:79:5c:65:03:86:c8:e6:d9:91:89:37:16:cd:2c:34:
         50:3a:41:60:3f:10:8b:d4:98:c2:ea:b2:2e:72:e6:3d:43:65:
         5d:97:6b:3d:38:ed:27:12:e0:74:ad:08:b3:40:5f:39:aa:99:
         49:9c:53:16:41:03:66:d2:9b:b1:14:f6:db:75:6a:dd:e8:55:
         58:49:96:a4:e1:15:93:ff:c0:29:06:6a:d5:6c:6f:90:f9:12:
         e9:b4:fe:d8:95:f8:c3:33:59:54:d2:bd:b3:d4:6f:2a:30:9a:
         fa:d4:6d:80:19:dc:65:b6:a0:21:3f:f6:d8:05:42:77:76:f4:
         26:96:86:9c:c3:30:0c:cc:a2:19:8f:e2:74:3f:d5:31:20:69:
         b9:74:df:33:55:d1:cc:d8:7d:66:fc:8f:b6:90:78:15:ea:0f:
         44:fc:d2:0e:19:4b:55:73:97:1a:60:df:f7:a6:6e:ea:f4:d9:
         a5:96:b2:51:02:2c:d4:cc:73:d1:82:77:65:64:d7:f9:4b:6e:
         09:d1:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:10 2025 by rpki-client