Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
File:                     58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (raw, json)
Hash identifier:          w4SttZsrIkeCFD7LRbAak4q2LplR07oBBPtLYZwa/n8=
Subject key identifier:   67:8D:C4:FE:35:7F:A2:94:80:AE:D1:3B:41:CB:C5:2D:B5:6D:A9:CA
Certificate issuer:       /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
Certificate serial:       010D0C9F4328584B2CF717DCB9C120AB640F6A80
Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     29765
IP address blocks:        162.217.104.0/21 maxlen: 24
                          192.104.0.0/24 maxlen: 24
                          199.80.28.0/22 maxlen: 24
                          204.15.96.0/22 maxlen: 24
                          208.91.240.0/22 maxlen: 24
                          2606:5b00::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:17:dc:b9:c1:20:ab:64:0f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=f2bcf774-ff12-4a41-83be-dbc0e0f1bb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:d0:51:1a:a5:56:52:a8:4b:54:e9:2e:36:
                    de:76:20:52:17:d2:aa:53:bb:0b:b0:14:b8:f8:50:
                    7b:75:08:7c:a8:f0:dd:5e:94:9c:a3:37:88:84:46:
                    c8:06:83:61:89:a9:37:ba:b6:75:b5:4c:a0:9b:c6:
                    50:7e:9c:a3:ea:ba:8c:c7:eb:51:8b:df:41:f8:16:
                    57:52:44:5d:25:c2:cb:05:ca:1d:f6:df:f3:d4:06:
                    ee:83:50:94:7e:9f:ed:b6:cb:24:a5:50:80:f4:a0:
                    c8:30:00:f7:3f:c3:ca:c4:f5:39:e7:5a:15:a6:b8:
                    8f:c2:05:eb:63:97:9a:2b:9f:ef:fd:3e:10:e7:b9:
                    09:62:55:08:a1:60:21:81:f5:ca:f4:28:dc:27:43:
                    39:60:ca:8b:01:0e:ab:b0:d8:83:08:06:9c:ae:63:
                    82:fc:0f:5b:2b:e5:ca:90:94:ed:dd:b8:5f:79:14:
                    96:62:4b:48:5e:2f:6f:70:34:d1:a4:f4:1a:11:db:
                    87:be:72:a7:1c:84:9f:9c:d5:16:6d:7a:ac:11:42:
                    10:5f:e6:0f:18:5a:0f:48:0b:c3:22:31:bf:2b:5b:
                    f3:d6:d4:b6:8d:c7:b1:d2:93:50:49:8f:21:99:81:
                    b9:dc:8b:74:a0:d7:c9:43:f7:46:82:06:0c:84:c5:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:C4:FE:35:7F:A2:94:80:AE:D1:3B:41:CB:C5:2D:B5:6D:A9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.104.0/21
                  192.104.0.0/24
                  199.80.28.0/22
                  204.15.96.0/22
                  208.91.240.0/22
                IPv6:
                  2606:5b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:11:4f:d6:6f:7e:7d:95:0b:54:c9:ff:65:a1:99:37:94:
         76:67:44:be:a7:2a:d5:37:f5:6d:15:53:fa:63:75:8e:37:ae:
         b5:e8:9e:6d:ac:a6:1a:e8:f1:b9:7f:97:8d:43:9d:75:95:d8:
         db:cf:05:34:d5:c3:c1:ef:af:33:b2:98:a1:0b:ec:ae:24:c4:
         28:a3:98:e9:78:9a:1d:b8:09:e5:eb:8e:2e:59:40:83:ed:79:
         6a:3f:22:74:dd:36:a0:96:a9:11:e3:91:35:ec:dd:d3:13:48:
         e2:72:2e:a7:fe:fd:ab:0b:18:1a:e4:93:9a:14:67:f5:70:c2:
         6d:9a:50:84:89:af:ec:60:ce:cd:96:03:4c:13:d5:d2:5c:6e:
         e2:83:9c:ae:26:8e:0a:0d:0f:c5:ea:5c:c0:d7:f8:99:65:e3:
         b1:fe:12:4b:8d:08:d3:5f:5e:b7:22:93:97:39:6f:e2:18:ee:
         f7:c7:0a:bf:b2:cc:d4:3e:22:39:2c:a8:ab:8d:70:97:0a:50:
         c9:f6:99:7d:94:17:2c:50:04:ee:99:f1:61:aa:ea:e0:1b:73:
         c8:90:ea:8e:06:eb:e6:ee:c1:03:86:68:f7:7c:dd:63:82:93:
         bf:d2:36:b2:2e:93:e1:d1:f8:36:ce:3b:de:b1:b2:24:17:b6:
         fe:45:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:27 2025 by rpki-client