Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa
File:                     c8d33b8b-f1e7-3532-a195-f3f117e50354.roa (raw, json)
Hash identifier:          bmRdbDiDL4sj1XQ6PeUAQtBZ8US5jd9H5PRMR7BiEPE=
Subject key identifier:   13:55:A3:89:E1:CE:86:BC:0B:05:36:BD:AD:4B:DF:86:AB:10:2C:BD
Certificate issuer:       /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial:       010D0C9F4328584B620208EB687734AE539D5900
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     20473
IP address blocks:        104.171.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:08:eb:68:77:34:ae:53:9d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=3d1da57f-48fd-459f-ad25-52bc498ff1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:68:b4:20:e8:3c:8e:e5:f5:f8:ed:fc:85:
                    04:f0:65:2f:bf:2c:81:21:4b:6c:5f:d4:2c:16:c0:
                    8d:61:54:b0:73:dd:1a:fb:c8:b6:ba:c9:99:cc:5d:
                    7e:3a:4f:c7:ea:0b:4c:fc:fc:2f:20:2a:4b:09:48:
                    09:87:a0:f1:94:65:0f:d4:f0:5d:c2:00:ca:33:50:
                    3a:31:62:1a:50:c3:d8:47:86:63:70:1a:1c:e6:ce:
                    20:ba:63:cf:7a:6f:a3:66:9d:c6:48:6b:97:2d:d9:
                    d4:a2:ca:2d:63:6b:ab:76:a0:db:87:a3:9a:51:81:
                    49:83:d2:5f:8e:cf:d3:63:11:e3:cd:ee:99:61:56:
                    93:fa:b4:32:3b:08:49:02:2e:8c:6a:6e:33:5e:ff:
                    30:fd:d9:80:f2:69:15:5f:b6:81:dc:29:4a:43:82:
                    a7:78:a2:63:eb:2a:5b:16:bc:c5:e3:f8:2e:27:c2:
                    da:08:e6:3d:d5:cb:ce:f0:f2:a8:5d:44:3c:6c:e7:
                    05:27:14:b5:66:88:18:8a:44:7d:42:57:a0:92:4a:
                    22:b8:06:38:9d:0d:78:d7:a7:40:a3:3a:d6:57:31:
                    f7:c3:45:6a:77:a3:a8:a3:9d:3a:03:5d:65:5c:65:
                    96:46:3e:f6:71:d8:11:83:3e:ff:c4:65:0f:1c:78:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:A3:89:E1:CE:86:BC:0B:05:36:BD:AD:4B:DF:86:AB:10:2C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/c8d33b8b-f1e7-3532-a195-f3f117e50354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl

            X509v3 Authority Key Identifier:
                keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:02:71:f8:bf:6c:51:9e:fe:a3:90:d0:7a:b5:a9:c6:1c:
         b9:3b:9b:81:26:55:bd:ba:74:bc:e1:21:6e:97:03:3c:ed:6c:
         36:72:cc:32:d4:05:23:db:55:0a:c7:c1:55:da:23:11:0f:61:
         a6:91:96:f8:c5:6f:6c:03:b4:c7:64:63:40:f3:02:e1:56:c5:
         28:06:f3:17:2a:36:78:cd:cb:ae:e3:2c:e2:3f:ed:75:48:16:
         3c:62:8a:7b:ba:1e:6a:97:a5:33:00:f3:37:34:9b:79:4f:b2:
         9e:c9:92:88:a9:48:8a:9a:b3:c7:ef:f3:62:14:5e:f7:25:bb:
         00:e6:98:d1:d9:74:4e:6a:43:d2:c3:20:b6:70:84:39:98:ee:
         80:6c:85:71:e2:0c:10:56:7a:65:e1:38:9b:f8:2c:73:06:0a:
         57:a1:5a:bb:ca:3d:a8:8b:47:9c:53:ea:48:9b:91:ae:ed:40:
         21:7f:77:0e:de:45:28:ea:cc:e6:7f:0e:f3:54:d8:52:6c:d9:
         2c:84:69:b8:8e:37:c6:4b:4b:45:bd:74:4e:3e:d9:63:a1:01:
         7b:5b:8e:81:a2:01:be:6a:e1:5b:5d:87:94:69:d3:70:4c:2e:
         0b:3b:df:b0:6a:6c:f8:3b:78:27:31:7c:7b:05:64:10:c9:f4:
         70:ae:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:16:03 2025 by rpki-client