Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa
File:                     affc3e70-595a-3177-bd29-0b81043aade7.roa (raw, json)
Hash identifier:          kf1c8eB1z5cpdmdlXWEmv48V7/iAVKi2ArlJHyG5h8o=
Subject key identifier:   51:AA:36:AB:F8:C8:99:38:35:7F:E0:5F:5D:7E:6B:C5:22:72:29:C2
Certificate issuer:       /CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
Certificate serial:       010D0C9F4328584B6201F107690B2E7706557900
Authority key identifier: 0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     400659
IP address blocks:        207.174.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:f1:07:69:0b:2e:77:06:55:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f851d8e-ddbd-48cd-bf14-dd7804551bf6
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=8abd5493-641b-4b18-8029-62c7784cb8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:d5:bb:d6:84:75:24:17:4b:44:6e:c2:ff:
                    74:75:5c:31:36:42:51:6e:54:49:0a:b5:63:89:88:
                    a1:f1:b8:17:d7:a8:01:b1:fa:8e:44:b7:b8:5b:83:
                    2c:fe:0a:2e:40:75:9e:b2:70:03:ce:a4:a5:e5:17:
                    92:29:da:a4:1e:fa:8c:68:c4:30:fc:8a:15:5e:f7:
                    b8:f5:58:a9:31:2f:73:00:1a:0b:a5:99:7f:da:8a:
                    a0:55:5d:3e:fc:91:55:88:56:76:b1:63:2a:b2:48:
                    21:15:45:77:eb:3d:bc:18:87:0b:e6:78:b1:8f:05:
                    81:48:ec:0d:d5:65:78:9a:e5:fa:90:64:28:8e:ff:
                    1b:2c:03:3e:1f:c4:c4:ce:3b:c2:f9:68:30:24:d9:
                    88:cd:a3:a8:0a:60:e1:75:bb:91:db:0d:0f:03:9d:
                    1b:3f:75:b7:db:b4:3b:f3:3a:13:3b:44:8c:ad:a8:
                    fd:dd:6c:d2:5a:e5:e2:7c:d4:34:0c:27:be:38:c6:
                    b5:0b:de:60:c1:17:10:71:cf:80:54:d9:5a:0f:5d:
                    b0:b8:bf:fe:a9:90:35:55:8d:78:6c:c7:13:56:7a:
                    dc:42:c4:95:e4:f6:3f:84:18:c9:4b:44:13:80:1d:
                    49:70:2a:c6:01:3e:2f:0b:d2:e1:88:f8:b3:58:6c:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:36:AB:F8:C8:99:38:35:7F:E0:5F:5D:7E:6B:C5:22:72:29:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/affc3e70-595a-3177-bd29-0b81043aade7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.crl

            X509v3 Authority Key Identifier:
                keyid:0B:20:8B:9D:7E:4F:7F:06:06:2E:E1:E6:6F:E0:28:3F:B9:BA:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f851d8e-ddbd-48cd-bf14-dd7804551bf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:13:ae:62:9f:c5:3e:38:7d:ee:81:2b:f6:f5:02:9a:11:
         6d:d4:f9:3c:7d:f3:6e:cf:20:cd:33:dd:4e:c4:28:a9:af:d2:
         f3:15:14:05:ca:4c:c1:3c:c1:ac:8b:5b:6e:13:e7:fb:ad:62:
         97:d8:d5:f5:62:4f:91:c2:2d:82:0b:18:6f:26:33:94:7b:0f:
         2b:a4:dd:de:70:bd:07:2a:52:06:b7:58:cf:45:a2:96:b1:31:
         7c:40:ff:bb:d5:ee:85:d7:9d:61:4f:69:3e:e2:82:dd:21:c1:
         24:88:29:3b:a3:34:32:21:33:70:47:5f:09:33:4a:12:57:3f:
         88:89:32:98:4d:54:9c:69:86:31:41:36:ab:62:d9:b0:aa:bf:
         de:d1:0f:54:da:bc:a4:00:25:1e:47:a0:b9:ce:d0:a1:f4:16:
         7d:a6:35:06:d7:87:93:94:30:6e:15:d7:82:5f:85:0e:e5:a3:
         9d:19:e7:e3:46:a6:10:39:79:a5:4c:8c:1a:ae:34:b1:bd:a3:
         d6:3a:80:fa:3a:ff:58:f0:3d:e2:8c:c6:68:0f:d8:c7:bc:a0:
         55:ee:dd:83:02:b2:aa:7c:6a:e1:62:fa:1b:4d:64:8d:a3:45:
         7e:72:d1:c7:48:9b:49:41:dd:89:99:93:ab:f8:76:44:48:1f:
         a9:fc:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:55:42 2025 by rpki-client