Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
File:                     df426ff0-9772-37ec-98f5-d774d3e25215.roa (raw, json)
Hash identifier:          jCivBWbcdOrzjdMzSxX4HkWOFIDoD9N03sZIuiCli6Y=
Subject key identifier:   88:9E:8B:79:93:E1:D4:13:7C:E1:61:B0:72:D4:E9:3F:87:19:20:49
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F4328584B1C36BDD7B55A2C89CA239200
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     13979
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:bd:d7:b5:5a:2c:89:ca:23:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=84dc0121-d802-4903-96d5-435d46227183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:6a:e3:31:d2:62:1b:bc:d5:c6:a0:4c:01:
                    79:32:4c:29:f9:45:c6:f2:bb:1c:83:7d:a5:9e:00:
                    21:e1:cb:62:d9:57:1c:81:82:3a:67:53:c7:92:04:
                    6f:3c:b7:ac:30:8d:30:71:aa:75:ed:f5:5d:38:92:
                    a5:ce:34:0e:cd:89:cb:1c:2d:18:b2:a5:3d:09:5b:
                    84:8a:21:b6:91:69:86:15:23:08:ea:3e:d4:a5:31:
                    fa:4e:bc:51:ea:94:a5:87:0c:9c:26:5a:39:ac:60:
                    49:60:a8:21:b5:b0:74:69:aa:d0:83:45:2d:b7:19:
                    06:69:da:50:3c:45:49:a2:87:59:44:4a:4e:f1:79:
                    9b:7f:4a:52:61:0c:57:da:3b:cb:74:ac:8b:27:ca:
                    6c:1e:02:ed:d9:a9:e8:2d:81:2e:fd:d4:d6:1f:a4:
                    dd:a0:f6:52:5d:0c:9f:4a:77:f6:6e:38:bb:80:19:
                    2b:30:53:b5:30:d0:3d:12:5f:5b:91:9c:89:0e:6c:
                    65:e8:00:04:a4:b9:52:e1:fe:eb:d1:6a:df:25:13:
                    87:33:6e:98:d5:96:1d:d9:66:5b:7c:c3:e2:ff:ba:
                    3f:bb:f0:b1:e6:80:52:48:04:68:bd:84:0f:dd:07:
                    bd:84:2e:66:67:92:c4:86:4f:6f:eb:0e:d7:cf:8e:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9E:8B:79:93:E1:D4:13:7C:E1:61:B0:72:D4:E9:3F:87:19:20:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:49:06:c9:23:5b:2b:20:dd:d5:f8:00:1c:80:14:06:aa:
         70:ce:a7:76:7e:fa:6f:e0:55:43:41:8a:c6:56:40:59:44:72:
         54:1b:ba:64:a6:6a:e4:f5:9d:67:b8:3f:73:a9:78:4c:79:85:
         4c:16:72:c1:1d:60:1f:cf:84:7f:bf:76:5c:6c:53:34:28:39:
         7e:8a:32:d0:33:8b:5f:8d:d7:d3:11:71:49:eb:2a:5e:90:f9:
         0f:84:d5:87:12:cc:8a:85:21:d0:fe:4d:23:d0:a3:2a:99:db:
         34:b3:34:0e:8f:fe:a0:ee:26:3b:d3:a8:7f:bf:54:0e:1a:fb:
         c0:b8:cd:1c:84:8a:f8:b5:40:ac:dc:6d:d2:40:93:3c:79:b1:
         30:dd:4b:85:b6:5b:aa:31:0a:f1:fc:2a:3a:48:2b:80:4f:6c:
         b7:e4:9c:85:57:d8:ed:99:08:95:5d:e4:aa:9d:68:13:d4:54:
         ae:24:63:9d:d3:3f:33:fe:de:54:b0:7c:4e:8f:13:66:79:d0:
         a7:39:e7:92:25:41:e5:d1:5b:b2:e9:19:98:15:87:e6:7b:a3:
         e8:32:42:2c:77:5c:85:95:b3:52:bb:87:3f:81:3f:79:2b:6b:
         f9:db:93:f7:50:b2:22:3d:1b:16:43:8e:f3:a1:e4:92:78:95:
         c3:54:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:54 2025 by rpki-client