Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
File:                     7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa (raw, json)
Hash identifier:          T9kyx5dqivoGWLgfU6kstdXMyXfep0hKqunoDNRIKKk=
Subject key identifier:   65:AC:EB:7C:7E:4F:59:22:37:44:20:DC:5E:40:58:84:7D:41:1C:21
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584B1D9C1DEB7B3D654F16312B00
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     53454
IP address blocks:        162.248.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:1d:eb:7b:3d:65:4f:16:31:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=1349321c-57c2-40f9-a208-3b4d2229c0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:7f:a1:f6:23:37:3a:dc:2c:28:dd:47:d0:
                    ac:65:f8:95:0f:76:e8:cf:86:92:78:26:99:c9:5b:
                    e0:59:fa:fd:7e:68:85:48:8d:fe:7b:c4:8b:0c:e1:
                    cb:8c:bd:a9:c1:2b:b0:6b:48:48:06:25:10:1f:53:
                    b3:9e:6c:db:84:44:27:1b:60:6b:82:b0:ab:7d:71:
                    4d:3d:75:4e:b5:82:0f:bd:7e:6a:d8:8f:9a:c8:94:
                    02:8c:40:9e:91:f2:af:92:35:0e:6c:a1:98:75:c1:
                    3b:52:79:4d:8c:53:a0:2c:9e:25:2d:27:08:18:fc:
                    3e:32:d6:0f:de:62:89:31:59:c2:76:8a:f6:3b:f5:
                    77:9f:58:8d:67:53:21:35:97:05:18:ff:13:fc:4f:
                    53:35:41:0e:ad:53:f1:ef:6f:c7:4e:d8:12:3f:fc:
                    d8:42:e1:d0:c1:d6:4a:c8:22:37:96:e3:af:14:51:
                    5a:bd:ed:d4:ed:6c:81:75:2b:f8:87:bd:31:51:c7:
                    aa:f8:36:bf:ae:23:32:88:de:72:57:3a:04:35:84:
                    32:f7:b9:8f:d6:4b:16:7f:ad:0e:16:ee:51:46:3d:
                    24:a5:fe:68:aa:35:fc:2b:35:c9:a7:94:66:fb:fb:
                    94:7f:9e:6a:ea:d0:6a:71:90:c4:8e:16:d9:8e:35:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AC:EB:7C:7E:4F:59:22:37:44:20:DC:5E:40:58:84:7D:41:1C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/7300a0a7-a743-3c06-bdf2-2b946ddde2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:7f:46:b5:46:9c:1d:e9:c5:73:97:8d:a5:b2:70:75:00:
         38:e0:b4:67:41:3e:a7:22:ea:4e:34:0b:a5:1b:fb:70:ec:c7:
         bb:99:ab:bd:21:c2:a1:fd:fe:57:9b:37:f2:8c:d9:64:79:e4:
         1e:c2:57:88:81:b3:a9:52:58:3e:84:60:f1:a2:cc:ad:b2:2d:
         ff:64:dc:04:95:81:7b:57:43:0d:18:0b:1b:12:eb:f2:97:12:
         f9:39:f0:4b:70:c3:e0:0a:90:74:8d:b0:06:bd:aa:26:a1:50:
         7f:4c:18:68:96:b7:68:b9:f4:77:02:05:f7:d4:9d:30:ee:41:
         73:63:94:be:9c:c6:52:55:64:d4:81:f5:7c:8b:8c:be:82:44:
         8c:f5:57:4a:87:a3:49:82:26:f3:f7:c3:0b:4d:8a:e9:17:d9:
         44:a2:a1:ba:ca:e2:84:00:38:26:58:f5:04:4a:03:13:1a:11:
         b0:f4:fb:c4:8a:28:51:7b:8c:28:b1:d2:2a:67:81:1d:fc:67:
         65:6e:b3:71:56:72:20:02:f1:04:a7:be:df:30:c0:f1:f8:6b:
         d3:d6:20:e7:37:a4:ab:4c:03:67:fd:63:76:dd:77:bc:40:bc:
         41:7a:97:52:a1:2e:ea:dc:e6:d6:da:a8:0b:91:5f:98:ae:aa:
         82:04:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:58 2025 by rpki-client