Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02a2c4da-9274-3087-9860-7a95fb5231ac.roa
File:                     02a2c4da-9274-3087-9860-7a95fb5231ac.roa (raw, json)
Hash identifier:          BabCy/2c78ykL/HZ3JWb8ZFAjtjhp4r7HX5mf/B3Aks=
Subject key identifier:   55:C6:DA:D9:93:70:1F:B3:38:49:E5:A3:82:1F:D7:04:FF:29:8A:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B4E7725222093E2794EEF2D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02a2c4da-9274-3087-9860-7a95fb5231ac.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     393359
IP address blocks:        207.101.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:25:22:20:93:e2:79:4e:ef:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=53b9d94f-6d3f-4b21-a889-53069b7b54e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:61:e3:f8:85:13:89:a5:0c:37:e2:77:58:
                    98:d1:ee:cc:fa:c2:6a:7f:e8:d0:23:bb:24:63:ca:
                    7e:81:8c:2d:01:d2:82:2f:f9:3f:8f:9e:6e:37:97:
                    3f:53:b1:e9:52:6c:f6:c5:1b:9d:23:91:12:be:a6:
                    58:e5:ba:c0:dd:75:a2:41:bf:62:9b:5c:66:57:7d:
                    8c:b5:60:cb:28:d2:0a:9f:83:33:5b:19:63:1e:08:
                    f0:6e:08:3f:a4:fd:8e:98:71:1c:17:b8:27:bd:1e:
                    7d:50:c8:3b:f1:66:92:11:c2:f3:b8:be:f1:05:4a:
                    a8:5b:26:47:fc:d1:16:41:d0:b4:d1:53:23:fe:34:
                    20:e4:d7:79:41:72:53:75:77:53:26:a0:d1:42:8d:
                    a6:78:ac:39:07:51:b8:31:97:16:ea:e5:ca:b3:04:
                    31:78:c5:5f:25:06:1d:62:af:b1:88:52:9b:96:7b:
                    a7:d5:e2:8f:df:16:56:02:85:6c:69:25:42:6c:a5:
                    3f:07:ee:e1:86:a1:a1:9d:16:5e:24:0c:cb:10:f6:
                    ad:59:87:03:25:5c:df:46:44:a1:a2:83:ab:59:c6:
                    03:bb:cc:4d:e1:1b:87:eb:17:1c:ed:1e:e3:b2:c3:
                    b6:f6:bc:2c:d7:24:39:b4:bd:ee:e0:0d:c8:30:80:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C6:DA:D9:93:70:1F:B3:38:49:E5:A3:82:1F:D7:04:FF:29:8A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02a2c4da-9274-3087-9860-7a95fb5231ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.101.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:6f:e2:48:ba:5e:ca:0a:f0:5b:03:d9:7e:c8:b6:b0:f4:
         6a:9b:99:64:d2:f2:b5:02:3a:e3:d7:06:e2:3c:da:31:b3:af:
         39:cd:1c:0f:69:cc:75:16:2f:7d:3a:0a:6a:4d:f9:ec:14:56:
         c5:eb:6c:db:99:de:c1:73:4e:fe:92:74:2d:a1:7e:09:03:d7:
         53:52:af:c9:65:f8:32:3a:e1:82:ab:10:0e:18:fc:4a:5a:1a:
         ab:1d:d0:a1:e2:35:e9:fd:48:f9:ce:3f:dc:5e:98:8c:4a:f0:
         22:b7:89:bf:e9:fd:b8:ba:a9:0b:8e:f8:91:01:90:c7:4a:e8:
         10:10:0d:bb:5e:05:f9:1d:4a:29:27:a0:9c:e6:f1:6c:ba:35:
         ec:9e:ff:61:d3:4b:01:f0:9d:99:54:2a:fb:26:85:b9:9c:73:
         62:7b:05:9d:ed:f3:65:00:80:64:79:f2:26:a2:0c:f0:ac:a7:
         c0:66:26:2f:f9:27:57:cc:71:9e:48:0b:e2:7b:4c:eb:d4:0d:
         ae:15:e2:fd:3f:be:52:38:0e:75:cd:4d:2e:18:36:d3:65:8c:
         34:94:cb:02:ed:27:bb:d5:e6:e9:15:23:ca:85:aa:c5:e4:d6:
         89:3c:c1:a2:b0:a3:df:8b:36:2f:ae:3d:12:74:aa:8f:13:38:
         17:35:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:46 2025 by rpki-client