Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa
File:                     79da7553-30e1-3765-92ee-f12f1e6dde87.roa (raw, json)
Hash identifier:          R5S10fTI0wvPLhn+r1PLz9hQ1CcrYnAaNAGOUafckyQ=
Subject key identifier:   F8:A9:71:29:C9:C5:F7:C0:F0:23:DD:34:E5:B7:2C:30:A6:36:B9:A0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC283B949A2D27556D3540
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     11105
IP address blocks:        207.23.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:28:3b:94:9a:2d:27:55:6d:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=e7effe6a-afd6-4d7c-859e-607e0d01aaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:34:cd:75:a1:1b:ef:31:e8:4a:90:f4:23:
                    13:e3:b5:cd:f4:ac:fc:e8:50:21:44:67:fc:a2:d4:
                    ac:dd:98:16:9d:25:1c:13:ad:1f:cb:79:18:9b:a0:
                    1e:24:b1:83:27:87:70:42:89:69:12:93:77:e0:e7:
                    35:aa:3c:5f:b6:a8:99:8d:cb:21:46:1c:3d:60:64:
                    cf:57:a6:08:d7:bd:65:58:37:2e:a6:ce:d9:d5:66:
                    b4:62:9e:81:44:8b:a4:05:1f:38:d2:64:38:23:5d:
                    5c:53:dc:f5:aa:8d:b0:f7:c1:2b:5c:ed:9a:fb:11:
                    6f:f7:c3:13:ec:eb:0e:43:bf:c8:c8:1b:8a:24:d2:
                    a4:a7:0e:1f:32:24:7b:e1:da:50:ee:04:02:7c:c5:
                    66:7f:69:eb:d8:58:b2:03:b0:a4:4e:8f:69:9d:e1:
                    71:13:86:90:1e:f3:45:0b:0e:7f:e7:d3:07:58:89:
                    92:14:11:c3:30:a9:80:14:c5:cf:9b:51:70:59:b3:
                    35:40:43:84:0b:e1:13:1f:20:8f:62:2f:92:ac:71:
                    3b:b3:95:5c:98:da:12:16:fa:31:2d:61:6c:d6:df:
                    68:d6:2b:68:86:79:5a:d7:67:53:92:cc:19:40:d1:
                    55:b9:71:cd:81:f9:1a:d5:b9:9a:1d:86:c0:3a:e1:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:71:29:C9:C5:F7:C0:F0:23:DD:34:E5:B7:2C:30:A6:36:B9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/79da7553-30e1-3765-92ee-f12f1e6dde87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:94:5e:d0:fb:5b:9e:7d:4e:bc:52:7c:a4:60:a0:6d:91:2f:
         e6:37:64:0c:ef:b8:57:ed:8e:17:10:aa:c1:7a:fc:52:df:12:
         17:7b:08:90:66:f7:69:a7:7a:d4:05:0e:9e:82:ce:18:1a:d9:
         a3:35:31:42:9f:f5:db:c8:b3:fa:2b:92:a9:99:35:9f:76:dd:
         11:31:6d:ff:6c:f0:54:da:76:98:1e:9a:da:0f:8d:b9:08:82:
         53:cf:13:3c:47:f5:8c:07:55:c0:3f:66:cb:72:24:95:95:2f:
         c0:b9:62:26:32:0d:58:c5:39:b6:2d:d8:76:c8:f8:e6:70:44:
         e3:71:ad:21:26:57:fe:90:a3:c4:d3:65:52:b1:cf:67:4c:bf:
         41:0b:0b:20:e9:88:51:a6:2a:26:42:db:6e:8e:f4:f5:37:5a:
         9c:eb:44:07:56:89:d7:fc:b8:7b:db:b0:c9:c3:fa:58:7a:6d:
         40:70:63:0d:1a:4d:ab:37:72:dd:6e:f9:94:ea:45:14:1c:2a:
         ed:27:4b:9f:4a:9e:79:36:f8:99:2d:3f:d6:9b:8a:3c:46:a6:
         f3:80:03:9b:6d:b5:16:5a:1f:66:4e:cc:ae:ff:8f:4b:06:f9:
         71:7d:9f:9a:71:42:92:a5:dd:32:bd:e2:4f:ed:f4:6e:b5:cc:
         53:7f:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:02:21 2025 by rpki-client