Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
File:                     6f794266-0944-306d-ad4a-c02c519c347a.roa (raw, json)
Hash identifier:          95tauEUhkjO/kQEzJxOKYNfOZe84gow3GaYCyCyVg1k=
Subject key identifier:   44:B7:EA:05:CB:4A:7F:E6:01:1B:95:21:71:9A:41:CF:29:BE:53:27
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B5F375F84202B5DA316921E40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        108.170.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5f:84:20:2b:5d:a3:16:92:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e7132e26-76fc-4675-bfb0-2548fee1b066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:85:a4:4d:ad:65:7b:9c:32:7d:e1:b7:d6:
                    02:ba:aa:30:db:47:5f:2d:7f:6d:9c:a4:d8:ce:32:
                    7d:b6:6e:6d:f4:c9:26:e7:18:0c:33:8b:3b:e5:c8:
                    84:ad:ec:8a:93:c8:99:94:5f:61:8c:d0:a9:1e:a2:
                    f7:90:9c:8d:53:f9:99:ab:b4:b0:0f:8d:6a:b9:d0:
                    a9:38:89:09:44:d1:ee:41:86:2f:53:13:74:9e:eb:
                    a2:1b:14:bc:82:31:a1:87:b0:b8:97:5c:14:90:10:
                    90:6a:5f:a4:2b:1a:79:bd:b7:f1:b7:00:a5:f1:ff:
                    ac:2f:03:3d:93:71:1f:4a:e5:b4:13:85:c2:a9:ad:
                    8f:bb:fb:64:f2:04:9a:42:82:bb:f4:26:58:38:e3:
                    2d:1a:35:92:6a:8c:08:2d:91:29:bb:ed:fe:35:6a:
                    6f:d0:f9:93:5f:91:3c:60:34:46:73:06:97:64:13:
                    6d:cc:fc:c8:ef:9d:51:52:4a:cd:5b:c0:2a:b0:d0:
                    6b:e9:be:93:7e:d8:e3:ac:fa:16:79:28:f0:3e:2f:
                    50:1c:82:34:3c:38:a3:da:a7:a6:6a:65:11:a1:46:
                    68:67:ce:11:b7:d5:43:82:00:bb:9e:d3:0d:9d:31:
                    ab:08:7b:c2:bc:6d:2f:f0:e8:81:b7:99:b8:0b:3b:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B7:EA:05:CB:4A:7F:E6:01:1B:95:21:71:9A:41:CF:29:BE:53:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:92:ec:4d:31:a1:18:d8:9d:13:79:4d:dc:3b:df:a4:68:2c:
         f7:fb:d1:db:60:4e:dc:ff:da:d1:7c:ec:72:a7:bb:aa:19:d6:
         44:d4:fd:01:f5:5e:d7:c1:05:ab:0e:31:95:e2:f3:62:ce:af:
         4f:69:c0:95:b2:9c:e6:54:ba:2c:c1:09:f8:c5:01:d9:5e:06:
         18:4f:49:7f:13:5d:d0:48:c5:88:36:fa:56:f9:09:c7:b8:6f:
         7a:25:fd:d7:24:fe:06:55:93:73:ce:e9:2c:8c:5b:90:c3:c2:
         f5:b3:1c:e8:b6:19:67:b8:77:71:dd:3c:3a:e5:a6:c8:11:ae:
         9b:8c:69:06:6d:a3:66:9b:fe:5d:b9:23:a8:c5:d0:a2:b1:a0:
         9e:25:ee:08:03:1c:8d:c2:6d:6e:8b:dd:b0:82:85:68:3d:c5:
         4b:29:8c:53:1b:9a:41:92:fe:e8:10:a3:3f:5e:46:16:00:ef:
         37:fd:ab:01:43:13:f0:cd:93:9a:67:56:10:dd:a6:83:e1:2c:
         0e:5d:da:ee:34:fd:1f:54:ab:50:a4:95:a1:b4:80:1a:6d:1c:
         17:4a:44:e4:f5:ba:ea:97:f7:ba:a2:e7:6f:e1:ba:b0:37:60:
         8c:62:a0:d7:d2:5a:55:b2:09:75:cf:de:0e:c2:83:90:27:36:
         a1:93:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:46:03 2025 by rpki-client