Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa
File:                     99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa (raw, json)
Hash identifier:          Z1X391bIQonOjOvsLhnvjJlNWgwBYiCwbNexRYFwSPw=
Subject key identifier:   A9:B6:8C:CB:08:DD:BE:12:5F:C3:32:B5:03:BE:F5:6E:CF:81:F1:E0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BA4E94B5CC2C1B5325A0FE680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa
Signing time:             Sun 26 Oct 2025 00:10:20 +0000
ROA not before:           Sun 26 Oct 2025 00:10:20 +0000
ROA not after:            Sat 24 Jan 2026 01:10:20 +0000
asID:                     834
IP address blocks:        209.101.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a4:e9:4b:5c:c2:c1:b5:32:5a:0f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 26 00:10:20 2025 GMT
            Not After : Jan 24 01:10:20 2026 GMT
        Subject: CN=8dde6370-6dd9-4f0f-91e2-d2216157645a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:41:77:d7:4d:e6:8a:55:46:79:ab:c8:f5:
                    85:c8:6a:80:bd:d4:0a:fe:5c:3b:c6:8a:c8:9d:b1:
                    00:d6:19:42:61:d7:29:74:5a:5d:06:c9:52:61:79:
                    f5:74:8d:c5:cd:c6:5b:91:18:b1:bf:e1:c0:cf:cd:
                    ac:f1:0a:bc:07:b3:d0:a2:7c:de:b8:a2:c4:3b:8c:
                    03:d8:c5:2d:0f:1e:12:c1:ce:36:5c:91:0e:f6:84:
                    92:f0:b8:06:7d:b8:fa:34:d7:3c:bf:03:85:3d:63:
                    61:32:e1:9f:5e:65:27:75:66:54:bc:cc:cb:ef:12:
                    2d:d3:7c:78:d6:c7:84:87:f9:4e:a9:3c:9a:fc:e5:
                    b8:af:93:02:29:ee:96:ac:5a:b6:7e:47:1d:44:9a:
                    22:35:8c:93:a4:ee:96:d6:09:58:e7:e4:b9:2f:7e:
                    ed:27:94:65:30:ed:56:a0:ea:7e:4e:2c:30:88:95:
                    b8:58:09:7b:bd:80:f5:fb:f9:68:5d:78:28:76:e5:
                    9c:69:dd:6a:8e:e2:fd:9b:70:28:42:f3:17:7c:22:
                    8e:fe:dd:45:70:d3:0e:89:63:ae:b6:21:c8:32:2a:
                    82:cd:71:0a:36:b4:6a:6f:ca:44:02:b1:de:84:61:
                    0e:09:b1:f0:7d:72:f3:04:e2:57:4f:08:62:58:b5:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:8C:CB:08:DD:BE:12:5F:C3:32:B5:03:BE:F5:6E:CF:81:F1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99c1e46d-ccae-343b-a00b-992c2e80d9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:43:68:94:1c:4d:20:62:29:3a:f5:9d:9b:5a:af:dd:58:
         f5:fa:b1:23:f8:47:95:6f:22:3b:e5:ab:fe:1f:db:98:cd:3b:
         93:91:dd:a1:41:47:ef:56:1f:6a:9e:27:70:ef:17:d6:ec:dd:
         63:c2:d7:2e:dd:36:b6:d5:9e:f7:ef:b7:04:bb:c9:f5:9d:2b:
         1e:90:3d:28:93:bf:a9:3a:71:d7:0f:74:d9:9d:ef:51:e8:51:
         0b:98:0a:e2:60:ca:2f:cf:dd:d2:04:9e:d8:0e:cd:be:04:a7:
         53:14:98:79:b3:02:68:0b:0f:8c:d8:67:7a:89:21:76:23:d4:
         6c:4d:62:49:06:ce:a6:ad:43:b0:a9:c1:11:4e:5b:2a:22:72:
         91:10:59:72:4f:03:02:a3:3e:9b:ed:50:11:d7:4f:e3:ad:60:
         72:d0:ea:18:5c:16:98:fc:d4:75:b5:f3:2a:70:2f:30:6d:b3:
         5b:5e:5d:74:e3:9c:54:7c:c9:66:aa:19:6f:fb:bc:59:23:fb:
         94:b1:17:88:d0:eb:c3:4d:18:b8:0f:4d:12:5b:3f:15:fa:05:
         c8:d7:22:ca:36:00:36:1d:71:a5:af:d8:b7:f6:da:fe:9d:68:
         03:ec:5e:ff:78:b9:89:e4:65:25:14:c3:05:20:af:15:6f:0a:
         3f:dd:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:32:52 2025 by rpki-client