Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa
File:                     7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (raw, json)
Hash identifier:          M5YVqMzNEepP5+/s5HFiuRkJU8n0dsezbLM7ZLp3r2Y=
Subject key identifier:   BE:BC:8F:40:E7:B1:D5:0C:EE:D0:7A:6E:25:66:2E:08:0E:08:D8:B6
Certificate issuer:       /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial:       010D0C9F4328584BBE403C87429F2F329A963080
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     62533
IP address blocks:        104.219.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3c:87:42:9f:2f:32:9a:96:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=869da83c-4e3e-4fe2-be8a-e019383e0882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:5b:9d:9e:d7:0b:c5:68:e2:e3:5f:6a:5c:
                    d9:d0:75:f3:08:87:9b:8e:39:c8:ca:86:93:cb:26:
                    a6:7d:3e:ff:7d:2b:60:dd:22:a2:d1:33:a7:b5:c1:
                    e9:80:97:0b:30:bc:39:67:c1:ac:72:c5:66:de:48:
                    2d:51:cb:7c:2a:78:ed:95:cb:72:9b:5d:e1:5c:68:
                    b2:17:f6:8e:c8:9a:93:03:e8:74:d0:c6:22:ff:7f:
                    17:28:18:a4:89:c1:97:14:48:2a:c1:67:7b:fd:7a:
                    a9:c9:81:81:e0:d3:de:f5:66:22:8a:bc:6b:1d:0b:
                    c3:80:43:a3:22:06:64:b1:11:ba:48:8d:91:0d:74:
                    65:66:bf:8f:cc:bf:5b:72:91:cb:81:ba:cd:20:1d:
                    02:62:a3:db:19:0f:fe:2d:22:8c:d9:e1:d2:f2:40:
                    bd:9f:23:0d:d3:80:8d:8e:ac:57:3d:0c:82:9e:38:
                    f5:1a:64:66:79:84:fb:2c:4a:21:4f:65:ba:7c:12:
                    c7:f8:46:10:2d:fe:b5:8b:30:fd:93:77:2d:47:19:
                    dd:d0:2c:08:81:9d:3b:c1:2c:e2:e7:5b:47:a7:fe:
                    19:32:09:b7:9e:c9:7d:d8:c0:8e:ca:64:41:ee:fc:
                    7d:1b:35:d9:87:26:a5:62:14:9e:be:46:8b:1f:92:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:8F:40:E7:B1:D5:0C:EE:D0:7A:6E:25:66:2E:08:0E:08:D8:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl

            X509v3 Authority Key Identifier:
                keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:72:73:74:3e:fe:bb:13:63:3b:06:46:26:97:66:99:42:3f:
         7f:fd:43:53:2f:8f:59:8c:b4:3a:b2:ec:55:08:9a:a1:02:98:
         79:df:cb:ac:d5:b7:92:cb:e8:c4:03:4e:69:ab:3f:cd:9c:81:
         57:49:1e:20:41:da:af:93:74:0e:57:06:e7:77:1f:bf:d1:05:
         ac:f4:15:f6:e7:0a:6c:be:e4:28:87:f3:da:ec:7a:6d:79:d7:
         54:43:32:51:ff:e1:c1:8a:04:a3:8a:d7:39:34:fb:5f:a5:86:
         79:a9:97:b6:e2:eb:1b:a7:57:58:34:02:f3:16:5c:5a:99:e4:
         b6:67:42:23:76:02:2f:3f:4d:ca:ed:82:91:cb:23:96:9e:2d:
         61:d5:2d:6f:65:93:72:e5:37:d1:76:b8:41:f4:10:9e:f2:c8:
         21:67:16:cc:f3:d5:ca:ca:e6:c0:b4:47:7c:a3:48:78:91:15:
         ce:0d:ac:b7:7e:1a:1f:37:15:e9:9d:93:37:ce:3b:48:14:43:
         a1:57:99:1b:ea:99:bc:2f:58:86:37:95:72:08:97:5b:6b:56:
         89:56:9b:54:55:79:cb:bb:76:8b:6d:93:a6:77:34:30:8d:ed:
         ca:45:69:1f:76:44:24:37:39:15:e1:a2:0b:c3:87:86:d7:b0:
         21:91:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:38 2025 by rpki-client