Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa
File:                     9faab904-6f65-3282-9b32-8d98d0475fc6.roa (raw, json)
Hash identifier:          KsPZ+j2NXOjEziKF+tvFKpaUBgCMlbaHkxWjR5eRzNA=
Subject key identifier:   5A:12:5B:C8:89:29:94:06:40:3D:E5:C5:5E:FC:2E:CC:7E:38:21:B9
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F4328584B1AD185750253DF26E2D58A78
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     2055
IP address blocks:        199.190.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:85:75:02:53:df:26:e2:d5:8a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=43fe2968-63cf-436a-9494-e87ed17b62b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:0a:82:7c:36:0a:09:8c:ba:d9:5d:61:94:
                    2b:3f:b2:d4:9c:90:f2:b6:cc:51:ef:e3:26:58:ed:
                    1c:7e:b6:42:4c:29:5a:00:db:76:bb:b4:a0:78:4d:
                    2f:3f:09:39:0e:1e:b0:ff:ad:50:76:37:14:e4:ef:
                    c9:ef:f5:1f:ae:38:f3:87:dc:ac:1c:64:f2:52:00:
                    05:49:09:e1:74:7a:65:75:d6:95:65:5c:42:bf:8d:
                    54:38:65:f6:1c:6c:ff:34:b4:62:a0:fa:05:14:95:
                    bf:ff:e5:ab:b2:b4:a9:25:b7:7d:3c:c0:1c:ce:d5:
                    f5:19:7d:9e:b7:70:3e:7d:18:80:8e:40:7d:60:cf:
                    6b:a2:49:a8:14:b7:4b:b8:09:15:a2:41:71:6f:6d:
                    35:95:1d:61:07:ea:12:4b:d4:8d:9f:b6:be:04:fe:
                    eb:45:73:f2:a6:ea:b1:f5:2c:46:d6:6f:47:58:81:
                    79:a8:7a:00:6a:85:b6:bb:8c:08:11:32:df:2f:46:
                    c1:f2:56:cc:2c:fc:4a:ab:a3:ed:e2:7b:ff:5d:70:
                    3e:0f:8e:12:7c:d1:35:f6:45:7b:60:5b:82:73:e7:
                    44:b6:c9:eb:87:1a:7b:a4:c4:8d:56:68:f9:c8:cb:
                    b4:3c:22:63:c6:f4:52:78:81:33:ce:69:fa:4d:50:
                    92:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:5B:C8:89:29:94:06:40:3D:E5:C5:5E:FC:2E:CC:7E:38:21:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/9faab904-6f65-3282-9b32-8d98d0475fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:57:21:47:ee:f7:1a:1b:44:c7:bf:9e:94:88:66:ae:1f:c1:
         d6:22:b9:0c:b4:4e:d9:c7:29:9a:1b:ff:80:d4:62:b8:b1:9a:
         f4:d1:12:bc:f9:c0:d7:18:54:f5:72:fa:b6:26:dc:d9:c1:80:
         01:96:fa:05:1e:ec:ab:40:31:cc:18:89:9f:cf:31:b3:1d:03:
         cc:28:bf:c5:98:79:e6:32:03:47:f5:50:3e:bd:5d:00:cf:ad:
         d4:f9:d6:6b:79:55:70:8a:a1:eb:2f:a3:0e:77:f7:a8:e2:ea:
         2c:cf:0e:b9:a6:19:83:73:aa:e8:2a:2f:4b:27:7d:70:f4:b6:
         ba:9a:51:4c:69:9f:05:ff:03:6c:63:29:22:2e:d2:ad:24:14:
         f9:24:4f:8d:00:47:ab:4a:6c:45:fa:26:44:7f:6c:02:84:99:
         7c:55:89:83:e3:37:bf:ee:82:c2:55:7c:52:56:c2:47:74:85:
         13:7c:10:39:ab:e3:66:18:f4:ba:7b:dc:a1:3c:a5:bc:fe:1f:
         3c:6f:22:38:77:d6:c4:5f:93:79:31:67:62:58:42:2d:57:c1:
         23:29:8c:d8:e2:1f:79:6d:4b:a6:fe:cb:41:be:c9:43:ca:37:
         2f:62:80:98:46:7d:dc:7e:11:f2:67:2c:fe:83:65:29:44:7e:
         b6:4e:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:12:40 2025 by rpki-client