Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
File:                     af0792a8-ca3b-323c-af22-eba4e83ee68d.roa (raw, json)
Hash identifier:          Iqrx7bnT0cy/p51KnjT4MTU82t7/4pWHeod6bK+0EEo=
Subject key identifier:   95:54:80:E5:13:CF:78:2B:1B:AC:43:31:27:48:EB:E9:E1:A7:E0:B9
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F4328584BABFD082EE03BC290F5CEC280
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     29909
IP address blocks:        199.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:08:2e:e0:3b:c2:90:f5:ce:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=bb7720c9-4555-4a9e-851d-6c7ff2ac979d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:33:45:85:64:18:d8:fb:8a:e3:4e:32:30:
                    87:4d:d0:5d:ef:ff:65:bc:e8:df:f3:c0:35:48:36:
                    ab:91:d6:fb:6e:82:37:dd:0d:a8:db:2d:ef:d2:2b:
                    64:a9:a8:d5:1a:8c:97:b6:3b:b7:53:e7:8a:aa:94:
                    9f:f6:f5:72:77:78:a3:84:f9:88:78:7f:c9:ae:87:
                    f0:4f:14:66:f8:b1:55:27:6c:27:02:77:cc:49:57:
                    62:67:52:8d:47:90:8f:0d:d4:87:76:58:94:7e:5a:
                    08:bc:26:ec:c2:75:9e:86:3a:cc:81:f1:e5:86:e4:
                    3b:ce:01:62:1c:91:dd:18:14:9f:91:f7:53:80:ff:
                    ab:3f:a9:c0:0c:cf:b3:60:c0:fa:1c:bc:db:f0:b0:
                    d1:e3:1a:01:49:4f:74:ab:fe:c4:46:28:b1:98:5c:
                    58:e3:2f:e8:22:f5:58:23:f7:fb:01:6b:75:14:0c:
                    1e:05:28:28:60:ca:2e:7d:37:d9:8b:da:6e:cd:a2:
                    87:f6:b9:98:54:4b:73:0c:ff:d5:d9:52:91:30:bb:
                    3a:32:7b:ae:ec:5b:c5:2e:16:61:52:b7:99:fa:68:
                    d7:50:91:34:eb:b4:90:e5:f2:62:54:d3:c2:76:30:
                    de:f7:3c:69:d2:d4:bf:87:7b:cd:bc:ad:4d:cd:f2:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:54:80:E5:13:CF:78:2B:1B:AC:43:31:27:48:EB:E9:E1:A7:E0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:cd:52:bb:d0:80:a1:ee:b9:fb:19:ae:2b:36:8a:57:e3:
         0a:e2:84:b5:be:c4:bd:5b:11:6d:f3:75:e8:b9:67:22:2e:db:
         43:10:61:68:96:f0:b2:49:9a:aa:fd:e2:ce:76:ab:13:76:4b:
         c9:6d:f2:4d:8e:ed:e3:54:2f:14:f4:82:96:e3:bb:32:da:94:
         85:1e:18:21:44:6d:12:51:e3:fd:a2:55:8c:a7:e2:45:77:7f:
         7f:f1:c1:b3:6c:69:a8:ef:7b:d5:0d:ba:8b:e0:79:a7:73:4d:
         85:48:75:5d:4e:8f:13:5a:ae:0b:c8:71:e7:49:75:14:7a:65:
         b2:4c:b1:ff:d9:f3:33:1f:5c:f6:e8:07:9d:14:89:de:a5:a8:
         e2:ec:69:24:37:5c:2a:d9:92:1d:9b:cb:d9:3e:f4:d8:94:7d:
         4e:cd:9c:24:09:6f:e0:69:a6:6c:59:9f:7c:9c:c1:bf:6e:9a:
         e7:25:df:fb:49:e8:07:35:b4:83:39:7e:a1:4a:10:90:ef:bf:
         fd:4a:4c:62:1b:db:4a:67:0c:66:2e:37:bb:03:ea:d6:86:3e:
         52:50:82:48:b6:7d:4a:df:4a:b6:8a:81:f9:76:38:5a:d3:7e:
         5b:c4:ef:dc:f8:02:c1:d0:86:e8:dd:6b:e8:7d:92:0b:35:a1:
         3f:67:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 07:14:09 2025 by rpki-client