Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
File:                     0a661bd3-50cb-3aaa-b872-5572157cf927.roa (raw, json)
Hash identifier:          Z+15t52gL2Pt9VL7b2s2SXs6Xn0RVodxQZQrYqMyJjM=
Subject key identifier:   DC:3B:BE:B8:76:67:88:C2:70:0D:7A:38:63:A3:4D:B7:99:72:EA:FE
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584B0A115BFC37CCDECAD14F8E00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     11325
IP address blocks:        104.251.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5b:fc:37:cc:de:ca:d1:4f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=31f59f15-9964-4f72-91ed-0319a5de0dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:c9:32:8c:66:07:24:4a:c6:5d:09:b9:81:
                    4b:b7:e7:7c:40:6c:5b:98:88:b3:59:be:6d:1e:22:
                    e1:6b:23:bc:0b:0b:d3:8b:fe:eb:57:d6:5a:b1:d3:
                    fb:09:1d:f4:f1:e0:9d:10:8f:69:fe:ae:51:0c:b5:
                    a7:4b:5d:5d:17:74:ae:6f:a9:52:90:ca:c7:41:84:
                    53:0f:56:40:2f:d7:6c:cc:5b:24:60:38:e5:a2:e2:
                    bd:8d:ce:8a:f5:3b:19:b6:93:73:a4:fd:5d:d4:a8:
                    19:e9:b7:45:7a:a2:f4:1b:8f:8e:b1:74:14:b3:18:
                    0a:f2:e4:e7:fb:93:19:60:30:bc:25:2a:95:53:f5:
                    83:c7:45:72:a5:9a:b1:50:4e:03:30:b4:62:3f:4e:
                    62:b8:68:86:a5:39:50:79:e0:39:01:f5:44:8f:54:
                    36:67:f6:13:46:8e:8f:c0:16:8e:9a:7e:bd:f9:39:
                    9d:b4:c3:48:e5:26:69:15:4b:eb:5d:77:b2:1b:53:
                    2f:50:50:ed:34:ad:00:63:54:0d:2a:71:16:12:c3:
                    37:35:de:a5:ab:b2:4a:6e:28:8a:d5:73:d1:c9:83:
                    cc:e9:86:ee:76:03:3e:15:9a:16:1d:a6:6e:bc:af:
                    e2:6e:9a:49:85:0f:3a:4a:b0:46:7c:7f:79:2f:9c:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3B:BE:B8:76:67:88:C2:70:0D:7A:38:63:A3:4D:B7:99:72:EA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:2d:ea:de:93:72:7c:cb:11:f8:79:ba:14:ef:51:87:0f:
         36:d7:a9:e3:65:c5:c4:38:96:2f:ec:6e:77:1e:d7:e0:78:e3:
         8a:9f:82:56:99:49:f3:d1:6e:ae:83:91:de:5a:3e:cc:37:29:
         76:66:4a:0a:4f:e3:b4:de:77:c0:fb:80:69:4f:48:27:a4:81:
         02:a2:a6:f7:5e:0f:aa:e0:bc:07:47:b9:76:32:77:86:8d:79:
         15:66:3f:55:72:ea:8e:b1:a2:36:a3:c1:51:de:fd:df:3d:f6:
         cf:8d:f0:b2:4d:cd:bf:f6:bf:00:74:58:a8:e3:1f:99:59:60:
         78:24:ed:ba:d8:e3:82:b8:da:81:47:cc:d9:aa:4f:4d:10:e5:
         76:a1:eb:d1:f7:dd:dc:ff:1a:14:be:fe:e5:f5:e3:c3:d6:6a:
         cd:bc:33:a1:ea:7a:ce:d1:60:03:dc:d8:73:10:9e:2c:41:71:
         71:e1:2a:8b:a4:8c:8a:32:98:ce:65:d9:a0:c1:c4:2d:9a:97:
         08:92:a1:8b:67:9b:5d:02:96:b7:eb:52:50:56:7d:7e:37:db:
         72:7e:3b:c7:26:02:6b:bc:2e:bf:46:0d:fe:e6:da:23:27:d6:
         fb:b0:15:05:8b:dd:d5:a8:2d:c1:97:08:a0:8b:37:d3:65:69:
         a1:a9:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:41 2025 by rpki-client