Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0e9e4748-bff3-3211-82b8-f78629d05662.roa
File:                     0e9e4748-bff3-3211-82b8-f78629d05662.roa (raw, json)
Hash identifier:          NNsKqLZR6OOsTeg0eHq1yxIpaKMkks+2ONbkMp/25NY=
Subject key identifier:   C3:69:E7:01:8B:2E:9F:B6:DB:C7:AF:D3:F6:2F:EF:CC:A7:74:C1:D6
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584B6F46D270C708D78BB49C58F0
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0e9e4748-bff3-3211-82b8-f78629d05662.roa
Signing time:             Mon 06 Oct 2025 19:05:07 +0000
ROA not before:           Mon 06 Oct 2025 19:05:07 +0000
ROA not after:            Sun 04 Jan 2026 20:05:07 +0000
asID:                     17275
IP address blocks:        161.107.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:46:d2:70:c7:08:d7:8b:b4:9c:58:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Oct  6 19:05:07 2025 GMT
            Not After : Jan  4 20:05:07 2026 GMT
        Subject: CN=547208b0-0b28-4b8a-8d51-a3e22424981f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:44:97:a8:0b:a4:e1:cc:38:99:00:1d:9f:
                    e2:90:d2:ed:32:7f:67:da:8e:49:42:4b:f3:f4:69:
                    96:33:7f:76:99:77:0b:90:36:8a:67:69:95:54:a6:
                    be:f9:0e:90:e7:1d:8f:f3:70:45:b5:4e:57:4a:2e:
                    39:09:08:5a:59:63:18:5a:0d:86:0b:13:35:98:5b:
                    90:07:67:3f:42:ac:a2:65:72:06:4f:77:34:89:4f:
                    70:fe:29:ed:58:2a:61:df:db:c4:df:d5:a2:09:13:
                    62:52:98:79:92:d2:8c:b5:74:d6:30:5f:74:cb:07:
                    9e:90:b3:f1:7c:de:68:d2:d7:da:28:d8:24:47:bb:
                    d2:31:ab:6d:52:c3:90:ae:49:61:9d:84:c6:ce:72:
                    81:e7:97:36:ad:08:d1:54:20:48:01:c8:fe:fa:85:
                    42:60:bc:72:29:b2:09:22:5d:a4:55:ba:10:aa:e2:
                    71:b0:dd:8e:d1:0d:c7:41:80:39:42:f0:c8:c9:3e:
                    01:56:f3:bc:98:d7:3b:89:e8:98:78:ea:81:18:0e:
                    51:ae:c3:09:a9:1c:6b:20:65:0e:c9:83:b7:ce:6a:
                    c7:30:45:de:78:d4:87:0f:99:8c:93:29:1a:48:54:
                    7b:03:e0:ed:2e:96:2e:9e:af:29:a7:ae:3c:fa:b6:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:69:E7:01:8B:2E:9F:B6:DB:C7:AF:D3:F6:2F:EF:CC:A7:74:C1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0e9e4748-bff3-3211-82b8-f78629d05662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:30:e4:95:e8:c6:aa:7e:91:02:a3:7f:52:db:71:2d:ea:5b:
         1c:ce:e3:90:9a:ea:1c:b9:cb:a5:c2:67:c6:19:46:e3:32:41:
         81:d9:d0:46:f4:00:06:5e:f5:6a:09:d6:a2:4f:1a:6c:60:cc:
         3e:a2:90:4f:5a:69:3c:49:db:8c:d8:d5:8e:a8:f0:c0:6d:9c:
         4f:d8:74:e2:3f:b9:be:e1:44:aa:30:b7:22:44:73:77:82:0f:
         58:44:b5:1e:81:45:73:84:7d:fc:60:9f:2e:01:31:46:ee:0f:
         64:cf:0b:d3:d8:4c:b8:45:72:b4:d5:f7:ca:b6:09:67:b5:2e:
         2f:a1:49:b8:4c:8e:7a:97:53:f7:4f:1e:73:21:9e:86:35:54:
         71:9f:f7:e7:c6:54:9c:81:3b:57:48:6c:39:f7:2a:79:d6:00:
         6a:a4:e8:75:00:b0:cb:4b:89:94:6a:0b:52:c3:d2:6d:8f:d1:
         86:3e:63:0f:ce:ee:4d:da:05:a3:3e:7c:42:aa:d8:29:2b:fe:
         05:d8:82:04:94:ac:8b:af:a3:94:b8:1e:3b:1e:cc:32:60:83:
         7f:bb:92:69:09:25:3d:06:1e:d7:b7:a3:d0:37:09:97:ee:71:
         e9:a5:a0:e8:dc:d4:6e:85:2d:2d:12:d8:e2:18:73:50:04:8d:
         3c:29:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:10 2025 by rpki-client