Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa
File:                     1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa (raw, json)
Hash identifier:          37AHnGxYUIXFVn8oDBlsn9q0Rf61J1B50quey5jZQF8=
Subject key identifier:   14:FF:4A:D3:89:25:F4:9D:DB:05:77:B6:DE:73:00:5E:60:F4:65:51
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE2ED32FBE43B59FD76A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        209.85.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2e:d3:2f:be:43:b5:9f:d7:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1448e355-ecff-4715-8c73-fbc4080d1614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:69:35:07:16:54:c7:57:92:ae:e6:fc:04:
                    12:c0:3a:17:6b:d9:72:aa:73:e8:de:22:86:0a:dc:
                    ad:8a:0b:1f:80:d8:b8:a2:2d:a5:3f:08:6e:67:86:
                    0f:b0:17:b9:86:e0:f3:d6:da:5b:ed:37:93:e5:71:
                    7a:b4:4a:4d:ba:e9:b4:3e:24:d2:3d:21:b7:30:23:
                    71:97:a0:c8:36:d8:11:a5:52:2b:ec:1d:b1:8c:f2:
                    8a:b3:ed:8f:81:ea:a9:8f:6a:19:fc:d6:13:1f:03:
                    0b:62:a4:ea:4a:c8:95:4e:00:28:0e:85:f6:23:fb:
                    fb:c1:84:d8:02:3e:32:7a:56:cf:61:0f:60:7b:45:
                    52:8a:f0:f7:87:09:2b:4b:53:9b:83:b5:7f:ec:0e:
                    ac:50:80:ba:a6:d6:45:98:56:01:d9:c0:13:42:38:
                    dd:eb:ff:a4:0b:46:0c:68:af:0a:39:e5:2b:56:c8:
                    81:bd:dd:81:8d:75:48:ee:7d:77:cd:0e:12:85:38:
                    91:18:0b:19:d4:42:e2:cd:9e:49:7a:4a:aa:6d:8c:
                    34:ee:c9:b8:6e:16:9b:1e:10:79:76:0f:f2:84:67:
                    a6:c8:75:a9:68:f1:a5:e8:3b:53:f6:be:31:f1:0e:
                    eb:59:84:66:30:30:49:45:2e:52:48:3f:d5:5f:8f:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FF:4A:D3:89:25:F4:9D:DB:05:77:B6:DE:73:00:5E:60:F4:65:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:89:a8:b7:cb:15:27:a8:21:58:7c:56:3c:08:b5:38:65:
         dc:be:51:f1:35:42:50:fa:f3:08:54:7e:64:e0:bc:98:5b:6f:
         50:bb:26:42:1f:5e:0e:eb:c9:42:18:98:c8:b5:4c:84:2d:b0:
         06:10:00:86:b1:1f:0f:31:f9:22:d9:53:08:dd:ba:6d:b4:13:
         0e:74:f1:10:c1:ac:7f:ae:bd:1c:fd:00:68:e5:10:7e:74:68:
         18:be:a4:00:2c:49:8b:77:b0:3a:cd:ad:4e:33:3f:86:53:a8:
         26:a7:aa:93:6f:48:61:46:17:10:99:70:b9:b7:07:f9:f9:1e:
         f5:2c:5e:96:36:f1:d0:5d:4f:2b:00:1b:d1:99:dc:5e:6b:19:
         d6:49:4e:1a:fc:84:a4:45:6a:ef:3c:95:e0:76:d9:bb:89:d7:
         88:cc:46:69:1a:fe:64:ff:bb:28:53:58:c2:83:3d:52:48:da:
         a0:db:e4:c0:a2:62:f3:cd:57:de:e8:57:a2:fb:13:af:6a:f6:
         ef:65:1b:3d:42:ff:7f:b1:8f:c0:41:c8:0d:85:81:31:1c:b0:
         8a:13:63:82:c3:09:43:4b:94:97:cb:de:7e:7f:6a:ed:b0:e2:
         43:b8:b7:be:d5:c9:ae:53:9d:7e:5a:5c:c7:47:84:74:f8:cd:
         35:a3:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:10 2025 by rpki-client