Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
File:                     dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa (raw, json)
Hash identifier:          8rIziAzTvnx0msq4JxazwMVSobBgz4Q1LgZJPWSL3nM=
Subject key identifier:   84:69:91:A2:54:29:24:FA:D0:A2:F1:72:71:76:6E:9C:34:B6:E5:F5
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584B8BE21355A2C99336538CC820
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     52347
IP address blocks:        192.34.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:13:55:a2:c9:93:36:53:8c:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=6154643e-bf7d-459a-adfa-fe921ab8fde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:c4:57:fb:3f:1e:c0:33:86:a2:f7:d9:d6:
                    2d:6a:6f:86:50:9e:5d:b4:57:2b:02:38:44:bf:d4:
                    35:49:9d:fb:d9:50:eb:6b:ed:50:66:12:80:8f:1b:
                    73:44:99:b2:a6:94:c0:37:92:d1:c4:bb:30:9b:98:
                    87:2e:07:22:76:d6:22:b9:81:d6:d9:d0:63:1e:57:
                    35:5b:ff:11:b0:c5:24:f6:6f:0b:37:99:19:69:45:
                    97:88:c6:df:87:a3:cb:0c:b1:db:50:c9:5f:ff:ff:
                    82:e1:60:54:34:bb:45:68:0f:cd:e8:ae:d3:6a:a9:
                    08:d6:a0:89:51:0f:b5:7c:eb:c2:04:31:53:e2:1c:
                    6f:ac:00:f6:fe:e5:63:33:6a:69:f1:0a:8c:95:b1:
                    ec:48:27:e5:0d:ab:a3:51:e4:52:3e:3f:ad:15:02:
                    6f:f0:b4:4b:20:1d:84:0e:3b:95:2f:9a:70:d3:d2:
                    10:77:c0:1e:6f:26:41:d0:59:c2:b1:8c:db:c7:86:
                    88:09:c5:cb:ad:85:64:2c:d5:d6:50:bc:97:3f:5c:
                    21:37:81:68:6c:7e:ca:3d:9d:19:54:2e:17:a9:bd:
                    e3:ae:d2:e8:a7:f1:01:27:f8:6c:9f:2d:01:66:22:
                    1c:be:8b:4d:0a:a3:38:fb:a9:88:fa:8b:f3:8a:98:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:91:A2:54:29:24:FA:D0:A2:F1:72:71:76:6E:9C:34:B6:E5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:21:4c:f5:f6:8b:c8:ff:43:03:25:3c:fb:80:56:e4:9b:58:
         89:03:bd:6f:7d:4e:8a:79:b1:e0:39:2a:07:ba:ce:17:c4:ed:
         b2:56:a9:38:77:75:11:5f:65:a2:19:ae:a7:c0:61:6d:0e:11:
         2a:d2:79:f5:7a:26:19:cb:1b:29:76:78:df:c1:9a:1c:31:55:
         5d:45:1a:d3:3a:a4:c1:1c:01:32:bd:1d:59:4b:71:2a:bb:25:
         3a:9b:51:57:42:ef:ec:34:23:3c:b7:0b:0b:65:60:a7:ce:54:
         95:93:06:e6:89:9a:09:75:b3:16:66:46:35:85:43:b7:54:7e:
         13:24:1d:72:42:4b:9e:1b:b6:98:97:b6:e1:64:a1:33:3b:34:
         aa:f3:94:f0:97:a8:70:08:54:99:13:6c:f6:bb:29:9e:41:b7:
         26:28:11:22:25:ab:17:29:e4:87:bc:ba:82:e4:63:13:90:48:
         29:be:7b:f7:c3:dd:e7:80:fd:de:62:ca:17:22:fb:f1:31:0c:
         f7:e5:dd:aa:48:fb:dc:3b:1f:9b:dd:6c:7c:ac:e2:83:08:ca:
         e9:22:a3:40:b4:30:0e:8e:64:f7:49:13:14:aa:bd:d2:30:3d:
         20:1a:7c:ed:f8:74:47:44:4c:b7:aa:8e:15:66:bb:ae:6c:3b:
         a0:d5:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:11:33 2025 by rpki-client