Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa
File:                     309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa (raw, json)
Hash identifier:          219HLImvEZyVmYkalrgJBiL1zDze4t+9tw8aAvsRDHQ=
Subject key identifier:   C1:D2:C8:27:21:E0:1A:45:E8:5D:68:C4:AE:ED:BC:45:B7:85:8A:33
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B970CE513868BF726EDEE0C60
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     3491
IP address blocks:        205.177.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e5:13:86:8b:f7:26:ed:ee:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=fe989561-1d61-493b-8ec2-88af9ad85b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:91:4e:d2:48:da:13:09:4e:8b:e5:21:46:
                    c7:ef:36:4a:75:ce:9a:92:be:a3:6f:ef:4b:2c:99:
                    eb:7d:b6:92:c5:08:84:23:86:fe:b3:9f:3f:b4:53:
                    87:78:e7:ef:50:7d:7d:e7:62:87:28:17:51:d5:64:
                    71:72:54:c7:c7:a9:33:5e:c2:90:dc:07:97:3a:17:
                    e0:c6:7f:92:5f:3a:98:8d:df:e8:a1:b2:8a:20:c5:
                    b2:0f:63:49:c8:c5:8f:a8:0d:29:96:2f:4a:d6:30:
                    36:d6:77:1d:5f:43:ec:0f:6a:41:af:e8:fa:1c:5e:
                    4c:be:2a:d5:a1:f8:43:c5:3b:a7:3b:52:4a:90:c6:
                    51:e8:f2:00:61:09:61:df:39:e1:f0:00:0e:a4:22:
                    63:0b:e4:41:eb:d5:81:91:3d:d4:5d:b9:47:e0:ff:
                    15:0b:2f:78:16:6d:37:26:a6:4d:cf:c1:9d:a1:9b:
                    8f:bb:b2:2d:8e:2f:71:ba:a8:65:0c:2d:85:65:4d:
                    72:8a:61:43:0a:85:b3:7d:64:58:39:da:5f:75:86:
                    f3:58:c8:bc:56:ff:c3:14:60:c9:0f:80:7e:7d:c5:
                    58:1b:c5:fd:0e:74:04:81:8d:ec:f0:b9:5a:90:b1:
                    a7:0b:15:cd:f2:2f:0a:43:4f:82:12:8c:85:78:7c:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:C8:27:21:E0:1A:45:E8:5D:68:C4:AE:ED:BC:45:B7:85:8A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/309666ec-7786-32c4-9ccb-67b07a0ed4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:82:b0:15:ca:46:be:6d:8b:ec:48:ef:12:af:2c:ad:e9:
         fd:05:14:32:0b:d5:e8:1b:6e:52:7f:87:a3:c3:18:3d:15:91:
         a0:d6:1d:e4:6a:54:a5:b0:be:c2:fd:cf:1e:d6:5a:c3:e8:fc:
         60:49:eb:bf:31:17:b2:0e:69:e3:7a:59:16:38:df:28:d0:1f:
         2b:97:4a:67:c4:99:d3:ed:64:f0:a9:1e:fd:95:0e:bf:b9:cf:
         a7:9d:9b:50:2d:ec:66:7b:77:50:29:41:08:80:7c:e6:bb:34:
         5a:c1:13:60:4e:d9:8d:d9:70:77:af:8c:e7:f4:ea:da:43:54:
         5d:67:58:d4:c3:83:e8:b2:56:65:d3:90:a8:10:2c:16:07:5b:
         cb:07:3f:10:50:14:7a:5e:6f:65:30:1d:e7:a8:2b:0d:fe:26:
         85:4e:d5:d3:33:14:e8:5e:cd:e5:f1:ff:2c:fb:fe:cc:c5:09:
         59:5e:8c:0f:ba:c2:54:48:d3:cf:83:4d:a8:10:cf:91:4f:57:
         80:15:86:bd:66:94:ce:a3:15:5c:94:56:8e:15:62:f1:1f:aa:
         d1:c8:81:18:de:c4:2a:06:78:a9:63:a7:86:fe:f8:51:5c:25:
         fc:95:4c:72:16:50:8d:75:81:07:83:03:75:16:a3:5e:04:06:
         e4:0b:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:18 2025 by rpki-client