Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa
File:                     d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa (raw, json)
Hash identifier:          MFBysF86rs5F1lNhFQ/cY1bc0Yyt6f3SXG1c8OQFLyo=
Subject key identifier:   86:A5:70:A1:CA:54:AB:B6:43:84:73:5A:A3:79:FE:99:9B:DB:00:B2
Certificate issuer:       /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial:       010D0C9F4328584B0CDC15A4AC9002ADEAE39980
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     271
IP address blocks:        192.197.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:15:a4:ac:90:02:ad:ea:e3:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=bae8035a-9c87-478d-9f15-47499848a3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:aa:f6:9c:25:24:ff:73:32:df:9e:61:b5:
                    bb:e5:be:60:0f:b3:a2:24:0d:a7:3a:e6:59:5b:28:
                    7f:f7:fe:75:d4:a8:3b:fd:ce:e1:b8:37:90:44:e7:
                    8b:ba:01:e4:04:74:bd:43:8b:db:b1:38:7a:76:08:
                    0d:71:0d:26:6e:4a:a8:b4:a0:54:a1:6b:dd:57:90:
                    1a:83:be:2d:98:d9:dd:ae:dc:57:bd:b8:07:ce:ea:
                    4b:50:85:7b:7d:a9:5e:c8:a3:0b:ce:ea:39:18:27:
                    39:f6:a9:9d:02:cc:8d:e6:ec:b9:e1:9b:2a:ae:2c:
                    d3:38:83:b6:8e:ec:32:ab:96:b5:88:bf:88:36:c1:
                    30:dc:42:c5:0d:21:f1:8e:f0:19:7b:a9:e6:cc:1e:
                    fb:99:21:ff:28:da:41:ab:be:2c:b1:45:04:ef:9c:
                    06:91:29:0d:89:d3:5b:bf:d5:5b:2a:73:66:77:2a:
                    54:ce:3f:94:d1:89:7b:59:a9:5a:2a:d1:d6:d1:f8:
                    1e:42:42:7b:8c:4a:4f:c8:77:1f:24:2a:be:4f:be:
                    66:44:34:c0:47:b1:d6:3f:bf:f8:32:ab:91:02:40:
                    0d:c2:d8:85:3f:7c:3d:c2:59:e9:89:ab:97:6a:bf:
                    e5:9c:72:42:51:5c:a8:98:d7:13:10:d8:58:71:11:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A5:70:A1:CA:54:AB:B6:43:84:73:5A:A3:79:FE:99:9B:DB:00:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:b6:00:83:6f:6e:1b:3a:07:a1:d6:96:4e:cb:56:96:55:
         90:15:fc:49:f0:9a:d9:a7:a3:dc:cd:9f:3c:f3:f0:82:a6:e4:
         78:b8:7b:f7:ca:bb:a5:a8:be:b5:b8:47:cf:8e:84:8d:72:51:
         2c:8c:96:73:86:c7:d8:43:63:51:05:c5:15:4b:b4:38:d2:dc:
         82:24:e4:7c:84:f4:d3:18:ec:74:46:0f:f9:13:4d:28:2e:f5:
         b7:9b:79:70:cf:e0:90:d6:07:18:03:97:47:ac:ff:08:20:b4:
         26:11:b4:c1:6c:13:59:29:ca:b6:4f:fe:e5:bb:43:3a:ea:32:
         4b:d4:4e:c4:af:a8:76:3e:bb:bf:b4:08:e5:56:0c:05:da:04:
         f2:cd:40:39:e7:5e:40:3b:3a:de:e3:b0:3f:bd:12:96:e7:4e:
         45:2b:5a:0e:86:69:27:c7:f1:5a:c5:0a:6e:c3:ed:81:53:85:
         12:31:73:a2:97:d7:32:dc:86:9d:d7:f9:f4:10:45:ad:c2:89:
         57:74:13:97:38:09:3a:6d:7f:04:d5:91:4d:d0:2c:76:03:60:
         8e:44:e2:2e:cf:a8:f1:1e:26:16:e3:0a:70:89:bf:c0:25:d4:
         bc:4b:94:e3:bf:eb:e5:e5:57:a1:36:72:ae:66:3a:d3:ed:92:
         49:af:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:08 2025 by rpki-client