Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f93208e6-1748-3c9e-a651-04c02f681724.roa
File:                     f93208e6-1748-3c9e-a651-04c02f681724.roa (raw, json)
Hash identifier:          rVMDLFxeNXIQjR0hsdTDmA4VPsih/dlYzqMqddrGz1I=
Subject key identifier:   57:1A:3B:4C:B9:86:9D:AC:4A:7C:F0:E1:73:86:58:C0:C8:E1:22:45
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584BA39D1CC84BEE3E59CBADC880
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f93208e6-1748-3c9e-a651-04c02f681724.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16696
IP address blocks:        199.247.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1c:c8:4b:ee:3e:59:cb:ad:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=9d812775-2189-42cd-96da-eb085e0468b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bc:3f:f9:41:a9:98:23:c5:c5:14:d2:65:a0:
                    aa:a1:50:df:b4:50:e2:1f:96:93:ed:34:12:66:63:
                    1f:e9:57:50:2c:4d:f2:03:01:3f:a7:e1:62:8e:a9:
                    9d:dd:e2:74:0e:a6:62:33:e7:42:01:ee:92:47:37:
                    11:c8:c5:b5:a7:44:35:d7:85:d4:64:bc:98:49:ce:
                    11:e9:62:8f:2d:ec:b2:28:4a:5b:3d:4a:5b:11:f1:
                    75:6e:38:80:4d:3b:f8:d7:49:1c:f1:f5:f3:30:fc:
                    b2:bd:a4:76:0e:b4:c8:b8:e5:03:67:e4:a5:b1:42:
                    4d:b6:a3:f2:6f:7b:75:77:74:bd:f8:a7:93:96:2a:
                    19:fa:0b:de:1c:f4:be:3d:17:1a:33:8c:65:e2:43:
                    0c:2c:dc:72:93:3f:d0:56:6b:3c:67:62:02:12:48:
                    60:a9:d2:47:58:d4:f3:a4:da:98:60:d4:4d:3e:3e:
                    73:cb:25:8c:79:fa:14:3a:b8:ca:c9:c2:2c:95:db:
                    b0:d6:2c:73:cc:55:72:d0:38:2a:12:05:cb:3f:6e:
                    14:42:74:a7:17:c7:60:39:6e:d8:b3:2e:15:cb:86:
                    5e:5f:4d:15:2a:2d:15:6d:93:77:fc:a1:94:c3:6d:
                    ab:02:db:ec:8a:4b:4f:4b:bf:77:48:16:d7:8b:b0:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:3B:4C:B9:86:9D:AC:4A:7C:F0:E1:73:86:58:C0:C8:E1:22:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f93208e6-1748-3c9e-a651-04c02f681724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:b6:ab:2e:0f:38:3a:f7:b4:1f:27:65:08:5e:65:23:f9:
         28:31:0a:49:f7:a9:43:8a:b0:2f:b6:04:6a:96:3d:6b:4f:47:
         79:21:ce:41:e2:51:cf:2d:2c:68:63:c3:21:df:03:5d:b6:14:
         6a:54:f1:c0:37:24:33:d2:9e:73:ac:b8:75:fc:1f:e7:9a:89:
         5c:79:89:93:c4:82:6f:2a:da:dd:a5:e6:ec:0f:e5:e1:c8:4f:
         ef:48:b1:22:00:8a:cc:fd:76:ab:db:17:b0:b5:54:71:58:e1:
         ad:f7:bf:62:3a:a9:95:cf:bb:18:e7:56:89:28:c8:a2:f2:3c:
         fd:8d:69:24:12:ac:dc:0b:b1:ae:ea:2e:3e:be:11:35:66:24:
         16:77:d2:93:3d:41:db:96:3a:ba:05:5c:b5:fb:3e:9d:a1:61:
         01:9a:8e:96:4e:f2:8b:db:7c:55:a1:b7:2e:75:61:13:49:f8:
         b8:6e:36:33:f1:7f:bf:4c:a9:11:e6:28:77:fa:4f:60:84:19:
         1c:c9:7e:e0:fd:4a:d1:60:85:34:e2:e3:88:1b:29:39:01:2f:
         69:f8:c3:86:7b:4d:7f:1f:35:10:00:06:5a:f0:c2:be:a9:f1:
         7c:18:cc:a7:6e:d3:4c:6d:bd:72:ca:d4:63:2b:1a:16:3d:a9:
         62:68:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:46:50 2025 by rpki-client