Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa
File:                     8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa (raw, json)
Hash identifier:          X9EYY93t5BBROh94br9F1vyR1pOpFyDhKHQCXMsUAp8=
Subject key identifier:   16:A0:C3:CC:26:C7:A4:3A:B1:2F:1A:42:A2:4F:4F:FF:1C:06:EF:50
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584B99D78053EDEA5E27DF3CCD20
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     1280
IP address blocks:        204.152.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:80:53:ed:ea:5e:27:df:3c:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=e6b6a34c-5bd8-406d-9682-476ab564008c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:c6:24:11:c9:0c:64:7b:36:34:49:42:8e:
                    46:48:f9:e4:b1:a4:44:79:8a:74:2a:9b:78:dc:b3:
                    07:24:df:ca:b4:a6:44:89:8f:da:ef:91:48:25:ee:
                    b1:6a:bb:e4:59:62:ca:12:10:c9:36:b4:db:69:b9:
                    56:15:58:9a:e7:98:53:0d:2e:c3:f4:fc:a3:d2:95:
                    29:ba:a5:c2:f8:d0:62:76:9e:19:5d:24:ae:da:ca:
                    0b:bc:50:1c:71:51:ad:dd:6e:b4:4c:0f:74:93:1b:
                    4a:2b:f3:62:53:1a:86:81:61:30:1b:95:ef:89:eb:
                    53:2c:83:2b:a1:97:10:0a:3b:ed:34:9e:52:9d:bb:
                    17:82:72:f7:65:a7:df:e3:02:b6:b0:a0:5e:d4:5a:
                    62:72:4c:ae:f0:e4:5f:81:86:3b:68:cc:39:05:b0:
                    31:21:a7:9f:be:1d:41:93:0f:98:17:c3:1d:fb:8a:
                    07:50:33:69:83:26:45:d4:60:67:bf:20:5b:c3:63:
                    58:f4:f6:74:ce:2b:fd:65:6c:f4:7b:fb:3a:fd:cd:
                    90:f3:5f:cb:25:b5:75:20:57:bb:93:b0:9b:d1:90:
                    59:ef:07:30:12:08:34:88:90:d7:3d:da:85:b5:53:
                    6f:f9:bd:8d:aa:42:26:5a:ac:99:0d:e9:a9:f7:85:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:C3:CC:26:C7:A4:3A:B1:2F:1A:42:A2:4F:4F:FF:1C:06:EF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:69:60:c4:50:a1:ea:c6:c2:dc:b4:f0:39:da:20:97:dc:
         92:64:9e:4e:16:e0:0b:67:81:dd:b1:2e:b3:91:fb:99:94:9d:
         6a:7e:34:d7:b3:0c:11:2b:1e:e5:dd:be:4d:21:04:f6:71:04:
         3c:34:ad:d3:0b:95:b0:4b:0d:b1:a5:20:1c:a2:13:4a:56:1b:
         5c:e9:3b:31:de:2b:c7:f3:1f:16:3e:74:e0:89:74:f2:69:94:
         ed:d2:bf:dd:57:a6:53:6f:c0:50:1b:17:28:41:cd:92:bc:5c:
         1a:f8:97:3e:0b:1e:e7:d9:b5:26:6a:6f:dd:b7:8a:50:72:63:
         84:80:54:e0:53:b5:a8:27:5c:08:df:c9:1d:93:3a:bf:d1:9e:
         ed:7c:02:68:72:b9:81:55:c8:dd:47:98:66:63:e8:7b:21:18:
         75:b4:7a:b0:cd:52:66:5f:1e:1b:55:2b:29:3e:b8:c5:18:1c:
         2d:55:6f:d4:fe:84:47:4e:63:ac:dd:4b:12:a1:41:bf:ff:b3:
         e2:70:4c:11:86:c4:cc:39:26:1d:31:82:45:b7:4c:b2:62:3d:
         bb:9a:7c:54:3f:f9:4a:d8:15:75:84:20:8b:b4:91:3a:46:40:
         00:9f:70:6f:82:b0:01:69:2c:b8:6c:da:8e:54:84:c8:e3:5d:
         d6:3e:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:47:44 2025 by rpki-client