Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
File:                     7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (raw, json)
Hash identifier:          w5cfjoKdFfqpqQ0TeYaBTSgQuCk0DYsYJwms+nH+ytg=
Subject key identifier:   20:86:79:1B:50:00:53:3B:BD:00:80:5D:CB:FA:BF:1F:A1:E9:B1:E2
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2C8E6B744F040898876CC4
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        162.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8e:6b:74:4f:04:08:98:87:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=0394ac09-c51c-4ff4-9b4d-9c8a2bcee13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:b5:9d:c2:90:96:be:3a:80:4f:44:a4:0f:
                    63:a1:61:73:02:97:9e:4b:4d:2f:c4:5c:ff:5d:94:
                    82:4f:07:99:09:6c:4c:0d:67:0f:ea:12:11:0d:9b:
                    2e:76:64:09:b3:dc:7c:d2:4d:bc:be:9e:f4:53:63:
                    94:5e:94:c1:da:1b:32:7e:24:00:86:39:80:55:b1:
                    b5:b5:39:f9:01:b0:03:24:7a:3e:14:71:a3:13:26:
                    f0:67:a4:6b:7d:d6:fd:de:9e:03:e2:80:2f:50:2a:
                    0a:6c:9a:27:eb:e8:19:58:24:e5:cf:b6:b1:ab:f0:
                    75:fa:d8:55:8f:40:be:da:95:84:20:34:94:1f:a6:
                    27:dc:af:4d:0f:be:ff:bd:31:61:c9:7e:0d:ed:aa:
                    4e:65:d3:1a:78:28:c1:52:52:82:af:f4:6f:6f:3a:
                    f0:3a:da:e8:38:45:f2:3c:af:b3:53:ad:dc:4e:f8:
                    69:36:8b:d0:f6:6f:9e:7d:22:3c:01:36:55:fd:c1:
                    aa:d5:5b:dc:75:1b:bb:69:58:ee:59:f2:06:3d:08:
                    58:d5:47:ea:26:41:b7:da:a5:10:7e:d9:e2:47:22:
                    dd:1b:cb:fc:05:69:4a:ef:3b:9f:18:d1:90:40:03:
                    67:72:08:07:be:92:d5:4f:f1:d1:d7:ff:ff:ab:89:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:79:1B:50:00:53:3B:BD:00:80:5D:CB:FA:BF:1F:A1:E9:B1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3e:7a:2f:31:be:99:c3:80:b1:a5:5c:77:ec:14:ec:b4:54:
         8c:8e:c6:da:d5:35:ad:9b:d8:c9:23:45:f6:c7:1f:70:dd:04:
         ef:6e:05:b1:71:27:4c:1e:5c:39:ab:b5:a2:18:bb:f5:25:53:
         aa:20:50:7e:8d:23:22:a8:e9:fc:97:9f:97:ce:b8:db:2f:27:
         ac:34:28:85:ca:67:a5:f6:ca:cd:59:63:c6:02:88:c5:11:29:
         3f:93:b6:79:ab:85:a2:31:d6:aa:a7:a9:b5:1b:9c:62:ca:af:
         1d:03:70:95:24:e0:ce:89:58:10:5d:20:dd:24:01:ed:42:7f:
         fa:9f:35:72:53:91:d7:30:5c:43:b2:80:e2:0e:ee:4d:54:15:
         b4:b3:cc:21:07:1c:ae:03:ac:35:20:b5:a9:bc:b8:d3:48:b1:
         89:b0:7d:6e:b7:ec:7c:1b:6f:9c:cc:2b:e3:03:cd:81:df:86:
         36:ef:79:29:01:9c:01:b3:04:f5:2d:24:3d:8c:cd:a3:9e:47:
         48:ec:3a:42:4a:04:58:7b:ed:58:12:48:5c:fa:0a:95:f8:79:
         4b:c4:f1:c4:95:22:18:ec:e7:dd:d6:f7:fd:d8:f1:78:3e:5e:
         34:b8:05:28:55:72:8d:e5:53:66:4f:23:58:c6:da:da:dd:ea:
         8b:16:f4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:59:45 2025 by rpki-client