Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
File:                     859da646-a794-3807-8ec6-c22432171131.roa (raw, json)
Hash identifier:          N0sNwyL0fvmv4r9abAT/Gc7J49BEhPdEiKM43k91hMc=
Subject key identifier:   3C:AC:4F:1D:DB:56:20:06:A3:DE:94:05:60:F0:97:87:9B:FD:A5:28
Certificate issuer:       /CN=9bd19c73-b597-446a-af11-1f8e6c172831
Certificate serial:       010D0C9F4328584B2066D5E4F3D1DBE85C137A00
Authority key identifier: 1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     395508
IP address blocks:        104.255.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d5:e4:f3:d1:db:e8:5c:13:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd19c73-b597-446a-af11-1f8e6c172831
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=aa332cc2-2f56-4958-9f2e-c3468f6beca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:dc:9f:b9:38:41:ee:c6:25:5d:e0:fb:cf:
                    1a:de:dd:ba:87:30:53:4c:cd:f1:9d:b8:51:29:f2:
                    10:9e:13:84:81:96:be:94:5c:5a:fa:00:4d:fc:e7:
                    52:d4:8c:b5:3d:90:9e:00:db:77:30:ca:53:3f:ae:
                    f9:52:54:46:93:72:89:44:b9:ea:de:ef:8b:09:c3:
                    5b:70:70:81:f9:c0:9b:db:43:f3:02:3e:61:ea:a2:
                    b7:aa:77:18:73:36:0b:2f:64:28:69:e7:e3:4e:f3:
                    61:55:e4:39:2e:48:8a:eb:f5:33:65:3b:ee:50:a5:
                    8c:1a:21:dd:86:4c:74:9a:ec:a2:b6:e0:b4:4f:99:
                    6f:fc:5f:27:94:fd:49:71:ea:e4:b3:f1:fb:45:13:
                    cc:fc:d9:ba:75:17:30:ff:15:0a:e9:90:04:94:93:
                    9a:17:c6:04:7a:82:1f:c6:01:bf:99:0e:4c:26:d9:
                    59:72:0f:c0:96:09:cd:a4:43:6f:a3:d8:35:3c:d8:
                    e8:ec:c8:07:3d:82:28:48:ec:16:3b:e4:2a:71:5f:
                    2d:bf:12:2e:fa:72:79:49:c3:87:25:eb:6b:3e:6e:
                    e1:ee:b0:06:a3:59:23:79:63:4b:f1:4e:29:14:99:
                    79:33:99:cd:96:d1:13:b3:c2:c3:58:32:3e:54:03:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AC:4F:1D:DB:56:20:06:A3:DE:94:05:60:F0:97:87:9B:FD:A5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:e7:29:4b:8e:ba:1e:12:52:0e:5f:4b:df:e0:72:bc:1e:
         30:d6:1f:5e:3d:91:bf:01:4b:d5:38:f8:50:62:2c:af:a6:0e:
         45:79:76:f5:66:fc:aa:c2:ce:03:b1:c1:db:53:f4:a4:dd:2c:
         c1:62:ff:30:8f:6f:53:78:0d:9b:54:f7:a3:6b:01:c6:7d:0b:
         9e:b0:f8:cd:43:e8:80:28:dc:af:0c:9c:d8:31:e6:76:74:1c:
         08:d8:22:65:c9:e1:f0:55:05:ca:ea:dd:13:3b:29:c4:d6:a3:
         e9:ef:45:22:22:c5:13:ba:60:ee:d6:4e:9a:27:12:83:f0:7a:
         13:46:e5:96:f8:cb:10:7c:4b:ec:a3:9f:0b:f9:5c:30:ba:20:
         96:d1:b2:1b:71:d1:19:18:b9:3b:c5:77:c5:3e:d8:ac:ef:5e:
         74:81:68:32:e7:aa:15:6e:cc:c9:10:b3:f7:99:05:07:71:74:
         74:23:77:b9:7e:30:8d:bd:11:b4:cf:a7:86:38:8a:e6:32:b3:
         67:0d:c3:64:5a:73:ad:a9:39:67:79:98:81:8b:83:7a:67:46:
         55:d4:b6:a4:a9:75:7a:35:16:72:8e:33:25:c3:22:1b:a4:b1:
         a7:6e:7f:4a:3b:44:20:9e:b4:5e:eb:17:5a:56:a1:2d:1b:51:
         c6:a7:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:50:40 2025 by rpki-client