Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9575b816-229e-3b21-b0f5-1e115b0cbcf1.roa
File:                     9575b816-229e-3b21-b0f5-1e115b0cbcf1.roa (raw, json)
Hash identifier:          dYuO4IWH8hNxkr7SeM6jJajCBUaMlMt1zZUaO8wmL5E=
Subject key identifier:   FF:4A:4B:5D:9B:D5:F4:C5:D9:E1:43:45:A7:3C:DE:D9:17:7D:E4:9B
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584B63673CFEE5AD1A5DA425E200
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9575b816-229e-3b21-b0f5-1e115b0cbcf1.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        209.169.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3c:fe:e5:ad:1a:5d:a4:25:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=b8b70146-8d2b-408a-8575-490c84844526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:ad:e0:07:0b:e1:e7:89:f2:4e:0e:ee:82:
                    48:98:34:01:d1:eb:6f:56:2b:d2:96:6d:f1:7f:d0:
                    27:82:95:e1:8a:82:68:5d:e4:76:44:55:f0:be:90:
                    38:b4:59:c3:e0:9e:54:1b:2b:a6:dc:f8:f6:91:c4:
                    1d:70:20:1d:e0:21:45:96:97:26:a6:d1:45:1b:41:
                    a9:64:dc:82:21:49:0e:09:be:e4:e0:6f:69:86:4d:
                    74:bb:37:d8:17:ed:1a:1c:d0:c2:d4:8e:7d:af:aa:
                    f6:86:aa:b6:d9:9a:b4:a7:80:f5:dd:27:8b:92:a2:
                    9f:e9:91:ca:32:45:12:8a:32:b6:25:33:86:04:e9:
                    04:3d:08:2e:02:68:85:cf:fd:e3:e8:b9:67:c0:0f:
                    ba:d5:45:74:37:26:e6:70:3b:91:bb:08:34:a0:24:
                    ed:b0:d7:69:ca:3f:a1:5d:1b:43:f2:38:78:05:a1:
                    c2:1e:5a:cc:37:9b:e0:6b:13:cc:85:83:d1:85:e4:
                    43:e3:68:77:eb:44:78:9c:9c:e4:9a:95:6e:fd:a7:
                    23:f4:e6:cf:06:f0:50:4c:31:ee:45:60:d8:40:d2:
                    68:a1:c1:36:ca:06:a6:f7:90:53:a4:c7:77:dc:da:
                    1f:8f:ee:a6:a4:fd:3b:bc:a4:b5:c1:09:49:92:f1:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4A:4B:5D:9B:D5:F4:C5:D9:E1:43:45:A7:3C:DE:D9:17:7D:E4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9575b816-229e-3b21-b0f5-1e115b0cbcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f2:fd:fd:33:4b:a3:06:64:11:ea:fc:2b:13:0d:7d:d2:59:
         03:ba:46:38:cf:21:c1:6f:91:e4:7b:6e:12:e9:0e:ff:27:24:
         53:3e:32:21:f0:0f:69:95:ed:7f:a2:41:89:db:80:ef:04:a0:
         e2:f5:d0:13:ff:e5:35:aa:b9:b6:7c:cc:04:3f:7e:81:72:99:
         ec:74:e7:40:59:51:1c:cc:94:64:88:0e:2c:38:80:66:8c:69:
         dc:0c:a9:0d:9b:17:f0:fd:28:26:53:59:fd:4e:0b:25:53:6f:
         0f:cc:41:f2:1c:bc:55:0a:bb:bf:50:d9:d8:31:b6:87:40:cb:
         57:59:a5:40:10:09:20:be:72:b5:24:30:1a:29:7d:11:4c:a9:
         b1:59:cf:5f:2a:a6:5b:ab:85:61:aa:a2:a1:2b:f7:16:a6:62:
         4e:ea:26:49:64:45:f4:ce:db:79:f4:92:b1:56:bc:c4:66:2d:
         a6:18:bd:62:d8:15:9a:1f:99:3a:b1:7e:cb:8f:3c:02:4f:b7:
         54:cc:52:fe:42:0d:be:7e:d9:92:51:3b:0b:26:4d:91:cc:0c:
         88:b4:33:9e:96:df:27:76:09:8b:63:42:df:cc:4c:dd:50:48:
         57:95:f0:b3:9f:15:ee:29:d0:be:6e:29:fd:0f:51:2d:c5:48:
         1c:11:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:35:59 2025 by rpki-client