Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/66beffc2-8b3a-3e95-a518-318bb5f1cfb1.roa
File:                     66beffc2-8b3a-3e95-a518-318bb5f1cfb1.roa (raw, json)
Hash identifier:          zN3T2BX5zz/wTfz1Uyi0YuWqaoyrWQWnn623EwBclV8=
Subject key identifier:   12:9B:91:B2:DF:44:C0:68:72:C6:34:F6:F7:0E:9C:3D:84:9F:CD:D1
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584B6F461BCC947AB7F3681B5800
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/66beffc2-8b3a-3e95-a518-318bb5f1cfb1.roa
Signing time:             Mon 06 Oct 2025 19:03:41 +0000
ROA not before:           Mon 06 Oct 2025 19:03:41 +0000
ROA not after:            Sun 04 Jan 2026 20:03:41 +0000
asID:                     17275
IP address blocks:        161.107.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:46:1b:cc:94:7a:b7:f3:68:1b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Oct  6 19:03:41 2025 GMT
            Not After : Jan  4 20:03:41 2026 GMT
        Subject: CN=851a5b8d-ec0a-4f47-b29b-ec5e54f6044c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:80:fb:3c:0f:95:87:b7:62:22:39:84:c4:
                    4b:79:12:27:d9:8c:7d:a4:4e:6d:34:7f:2b:5d:1a:
                    2d:3c:ba:dc:da:e0:a2:ea:bd:20:ca:4e:9d:41:36:
                    f0:e9:e1:fb:7c:2b:89:8a:01:e3:67:e8:80:59:a8:
                    ca:21:d5:08:5a:1d:24:91:f7:0c:5c:6d:b3:10:ed:
                    3d:0a:f3:fb:4b:ec:42:5f:aa:99:cf:f1:f4:3d:77:
                    f0:fd:0a:0d:2b:a9:82:a7:cf:72:da:3b:cb:bb:28:
                    ab:66:44:10:74:0b:8f:03:19:8e:bf:eb:6c:40:82:
                    ce:a1:87:72:09:93:6f:7d:7b:f2:b9:59:da:0c:24:
                    8a:77:49:db:e3:6e:53:a9:ec:c2:cc:60:13:08:8f:
                    9f:4e:4c:43:da:56:99:58:0a:10:76:a1:44:30:70:
                    89:f8:13:a0:7e:88:15:c9:29:a5:20:00:a1:bb:1a:
                    a0:b3:f3:72:ae:59:45:4f:db:06:f1:3c:0c:22:f0:
                    ab:e3:1c:23:ac:8b:f7:a9:90:fe:93:43:02:6d:44:
                    bd:c4:2e:3d:a1:fe:cb:ad:0b:57:21:59:2d:d0:2c:
                    81:8e:3f:3d:27:2b:a2:ac:de:d8:df:e5:4a:d0:b0:
                    57:3b:6a:5a:64:03:82:42:21:a6:85:86:ff:ea:bf:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9B:91:B2:DF:44:C0:68:72:C6:34:F6:F7:0E:9C:3D:84:9F:CD:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/66beffc2-8b3a-3e95-a518-318bb5f1cfb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:02:c0:54:04:00:41:25:46:e4:a0:5e:94:a4:74:c8:9e:41:
         75:c6:7d:65:5b:13:76:db:b7:d2:69:4e:66:89:06:65:2d:97:
         c4:5d:4f:7e:be:19:9f:47:ff:3d:4c:62:2a:27:06:1d:3a:bf:
         3b:90:d4:04:cf:60:70:7a:8a:74:e9:43:c6:d4:97:a3:10:f0:
         ef:34:c8:5b:58:4d:9d:b1:df:ec:44:53:c2:3a:7a:24:18:84:
         2b:e7:6d:d5:35:1a:ee:11:0f:3d:d7:13:aa:60:18:88:d6:7b:
         94:eb:33:17:69:48:c4:39:2f:b8:a7:86:34:2e:9f:9d:54:8b:
         41:30:b0:2f:03:6e:25:60:26:2b:99:34:27:7f:9f:42:2b:f2:
         41:66:09:b3:9b:35:13:ea:d8:c6:28:6d:0c:6e:fe:6c:ad:24:
         08:84:7e:a4:a2:9a:61:97:f6:bd:a3:8a:c4:18:91:26:cd:e9:
         24:e4:89:44:53:91:7a:44:29:7d:53:95:2c:35:4f:2b:e1:5f:
         e2:d5:64:a4:12:73:4b:e1:38:71:a3:ef:cd:43:ac:f3:06:33:
         f7:2d:d1:6c:e3:72:d5:7c:a0:b3:64:73:e4:8e:51:42:ff:36:
         1f:75:7f:19:75:04:4e:60:4d:b6:59:f2:a1:03:aa:89:2e:a5:
         4b:5d:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:07 2025 by rpki-client