Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
File:                     44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa (raw, json)
Hash identifier:          m6QCwcHDcbNg6rnSivG9Dh2El6+CTUTe2xsjnXtlVaM=
Subject key identifier:   74:02:F6:50:2B:29:D5:B7:C7:6A:58:AA:D2:88:46:A9:46:CC:98:AF
Certificate issuer:       /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial:       010D0C9F4328584BAA97A6E1B7341724017FD6C0
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        209.133.224.0/24 maxlen: 24
                          209.133.225.0/24 maxlen: 24
                          209.133.226.0/24 maxlen: 24
                          209.133.227.0/24 maxlen: 24
                          209.133.228.0/24 maxlen: 24
                          209.133.229.0/24 maxlen: 24
                          209.133.230.0/24 maxlen: 24
                          209.133.231.0/24 maxlen: 24
                          209.133.232.0/24 maxlen: 24
                          209.133.233.0/24 maxlen: 24
                          209.133.234.0/24 maxlen: 24
                          209.133.235.0/24 maxlen: 24
                          209.133.236.0/24 maxlen: 24
                          209.133.237.0/24 maxlen: 24
                          209.133.238.0/24 maxlen: 24
                          209.133.239.0/24 maxlen: 24
                          209.133.240.0/24 maxlen: 24
                          209.133.241.0/24 maxlen: 24
                          209.133.242.0/24 maxlen: 24
                          209.133.243.0/24 maxlen: 24
                          209.133.244.0/24 maxlen: 24
                          209.133.245.0/24 maxlen: 24
                          209.133.247.0/24 maxlen: 24
                          209.133.248.0/24 maxlen: 24
                          209.133.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a6:e1:b7:34:17:24:01:7f:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=04423e75-9be4-450f-a765-63aa6230d3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:a9:10:71:f4:4c:7c:7c:72:a7:d1:75:c6:
                    77:3d:11:e4:47:9a:b6:1b:a4:0a:c5:57:f1:56:52:
                    fa:f7:6a:88:3b:3e:77:54:9d:6e:dc:a5:84:b0:83:
                    25:f9:65:e4:d3:15:9c:6e:97:9a:90:a9:f9:94:cc:
                    88:88:f0:30:8c:f4:33:8f:2f:bf:b4:9e:f7:e3:3d:
                    d1:0b:12:ff:79:97:fc:70:32:5d:9e:f5:97:fc:6b:
                    e6:40:64:c8:1b:63:16:09:58:62:b3:01:17:d7:d2:
                    6c:fd:d3:be:b4:60:04:3c:ce:df:80:85:f5:ae:dd:
                    b4:31:61:a3:cf:5f:0a:54:2b:a0:8a:75:78:18:16:
                    80:ec:c5:83:46:ef:35:21:bf:9f:f3:2b:9b:71:dc:
                    d7:8b:40:50:fe:fc:a5:2b:6a:6a:b0:56:8a:bb:eb:
                    2e:b2:90:63:b2:dd:47:ad:48:dc:54:36:15:78:eb:
                    67:a7:9d:9a:4a:97:88:a8:e9:f9:36:34:1c:69:61:
                    ac:50:81:49:a8:3c:7f:a5:00:76:fa:1f:82:4b:97:
                    7e:91:00:8e:77:75:d6:d6:c2:9b:b2:d4:08:94:f1:
                    91:49:f4:a3:e7:ed:7b:aa:41:de:f7:cc:47:ff:a1:
                    9f:a0:9e:3b:8c:00:f1:e6:0b:b3:87:e5:56:aa:10:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:F6:50:2B:29:D5:B7:C7:6A:58:AA:D2:88:46:A9:46:CC:98:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl

            X509v3 Authority Key Identifier:
                keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.224.0-209.133.245.255
                  209.133.247.0-209.133.249.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:0c:4c:e0:c3:f3:33:95:cd:18:5c:6c:c7:cb:aa:74:e3:
         17:e4:53:df:c8:dd:52:c4:85:16:e5:4f:bb:ce:67:c6:66:0e:
         a6:e4:b3:3a:e2:03:a6:2d:d9:64:40:30:f3:37:2e:a2:4d:6f:
         0a:2b:78:35:a1:55:dd:8d:72:9e:c0:85:df:5b:5e:08:44:4a:
         50:03:f7:e8:e2:9d:88:0b:e2:14:eb:0d:e2:a2:1d:e8:07:be:
         94:1b:94:84:7c:9b:e6:f8:81:fc:e3:46:82:e6:20:2f:aa:6c:
         47:21:bc:f4:26:d7:25:f0:00:fa:a7:9b:64:0f:02:a1:31:37:
         a2:a9:95:2f:ef:be:f6:19:77:37:26:75:0e:51:95:f6:51:fc:
         81:c5:c9:5a:2a:21:52:94:2f:da:9f:69:07:fc:fc:e2:3a:4b:
         6a:8a:87:01:68:dc:eb:80:00:4d:f9:6e:ad:52:65:bb:2a:cd:
         82:f2:d2:2f:eb:8e:2b:1e:cf:5e:d6:4c:5f:6a:5a:01:dd:14:
         ec:f7:e0:a8:71:e0:75:71:b3:3a:57:01:c6:ec:be:42:7e:31:
         e5:32:78:23:ba:17:b2:67:3e:5e:02:35:5e:60:96:c6:d2:d0:
         1e:6c:58:32:68:b1:d9:72:92:a5:b8:47:79:0f:c4:ea:7c:fe:
         81:12:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:52:29 2025 by rpki-client