Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
File:                     04ecbba8-a20a-3de9-9e0a-adb751a99684.roa (raw, json)
Hash identifier:          /7Akj709Pkyx1+QgkSQT3+r7jkAnGXIVSwXnp9edguI=
Subject key identifier:   1B:91:7A:38:71:3E:AB:DE:D8:43:C3:BE:00:9E:D5:DE:3D:78:CD:2C
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B970CD399979033BD0B331B80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     137280
IP address blocks:        107.155.51.0/24 maxlen: 24
                          107.155.52.0/23 maxlen: 24
                          169.197.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d3:99:97:90:33:bd:0b:33:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=c131c85d-6170-4d38-9df9-19298fac6122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:3e:7e:1f:9b:89:53:8b:23:e0:01:bd:57:
                    6c:17:d9:22:98:9b:2a:e6:88:7f:de:61:07:5c:0a:
                    25:80:0c:74:0e:2d:2d:f8:b3:e5:6f:f1:33:04:d5:
                    0c:f6:42:d5:40:37:70:0e:cb:8c:75:ec:81:21:3a:
                    f1:35:37:ef:c7:b2:fd:7d:f4:ce:f1:44:0d:4e:d8:
                    61:60:2d:b8:9e:14:81:3a:9a:d3:d9:be:ae:2f:4a:
                    fb:2a:85:df:95:82:69:93:b7:a0:d6:11:7d:b3:0f:
                    74:ef:3f:56:df:c6:4b:bd:eb:0e:c2:a4:f8:f8:a9:
                    5e:67:7c:13:d7:44:ee:37:ac:dc:c0:22:c5:36:ee:
                    cd:dd:64:a5:27:12:cb:65:52:7e:bf:f0:54:18:ae:
                    b9:76:5c:3c:42:13:e0:34:6e:f9:0e:41:48:be:24:
                    ea:2b:d5:82:e1:de:8a:00:28:5d:7e:b3:23:7b:d3:
                    af:1c:29:3e:da:dc:fa:88:92:43:d4:a3:bc:b7:24:
                    fa:db:dd:fb:51:b3:ac:98:ab:3a:d7:1b:44:01:6c:
                    e5:fc:b5:48:85:a3:ce:71:e2:bd:40:a5:90:dd:8f:
                    1c:55:1a:11:9f:6c:ac:61:54:37:cb:d6:fb:89:93:
                    5c:46:3d:4e:20:bc:cc:b7:bf:0d:1d:93:6a:d6:5d:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:7A:38:71:3E:AB:DE:D8:43:C3:BE:00:9E:D5:DE:3D:78:CD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.51.0-107.155.53.255
                  169.197.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:c7:fe:ce:85:b3:8b:27:a1:59:49:7d:3f:41:63:08:ed:
         a1:e8:1d:d6:b3:2b:8e:5b:22:a9:2c:61:9b:e6:af:f8:4a:d0:
         17:ce:92:76:f0:17:77:48:33:67:0d:7f:f4:fc:2b:21:3d:b2:
         f1:1a:8d:19:1c:e3:47:86:67:c2:28:15:74:e1:ff:69:13:ad:
         33:bc:6b:f2:ff:1b:0f:7d:d9:98:f3:ae:ae:09:c5:de:6a:55:
         6b:7c:5a:b4:84:de:e0:54:fa:57:f9:84:f5:25:90:da:43:50:
         ad:c6:a7:ff:db:8e:5e:20:ff:04:5a:da:c0:2a:10:6d:f4:4b:
         db:6f:d9:3b:f9:8f:a2:03:a1:cd:4d:30:40:1a:0d:ba:bc:fb:
         e9:0e:8d:2b:4c:88:43:77:42:1c:fd:76:5e:b6:da:f1:0b:c3:
         57:e2:04:86:44:ad:01:ed:82:8b:de:83:c1:40:d4:86:58:c1:
         78:b2:19:fb:f7:4f:ba:95:64:eb:2a:cb:a7:68:2e:7a:e0:7b:
         3c:f8:97:a1:9a:c5:75:50:2e:0e:c8:4d:c3:82:3f:fa:18:dc:
         49:3c:b1:4c:bb:20:2b:a3:26:c0:05:92:55:96:ac:3a:b7:aa:
         10:dc:fe:60:b1:d8:51:60:0d:e7:41:1c:cb:dc:59:d3:45:a7:
         7f:b1:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 08:04:12 2025 by rpki-client