Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa
File:                     99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa (raw, json)
Hash identifier:          jqmlSlpX0C0KZTEf/VxRG3VAW07UZbZGkX5ZP5DQm00=
Subject key identifier:   09:02:7F:D7:EF:72:4D:07:87:9B:C1:2F:A5:19:9F:F0:68:06:EA:B2
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584B99D7ACE1B9432F0BE10AE772
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     8014
IP address blocks:        204.236.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ac:e1:b9:43:2f:0b:e1:0a:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=37734885-4e2f-4c70-a182-f8c1e6094c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:f3:9d:34:b4:56:8a:51:5d:56:2a:26:d1:
                    47:7f:46:d3:78:14:4b:ed:fb:6f:08:3a:9c:f4:e1:
                    cb:84:53:d1:75:75:c0:c9:5f:a4:46:71:be:f2:46:
                    1e:3f:b6:d7:10:b1:aa:b0:6c:42:ea:8b:99:45:2a:
                    9c:b7:62:fe:dc:8f:50:2b:fa:cd:2c:82:48:6c:26:
                    a7:5b:15:48:b1:68:57:50:b1:54:cc:4c:1d:a4:00:
                    bf:48:07:f8:07:5c:08:da:c5:a6:b6:fa:f6:b9:9a:
                    0d:12:34:50:25:76:39:4f:62:29:e0:f1:fb:56:64:
                    29:54:09:27:1e:46:21:3e:a3:67:fc:de:b5:11:ef:
                    4d:21:30:12:eb:ad:cc:3a:3d:69:01:b0:5d:dd:8f:
                    7b:79:32:f4:e1:8c:6e:b4:be:f0:94:37:3e:94:87:
                    7c:f9:a7:b8:89:77:a0:2d:6c:04:b6:26:e4:d2:4a:
                    ad:f1:45:7b:40:a5:8e:f7:60:a4:65:fc:9d:c1:59:
                    d3:64:b2:b5:9a:9d:c2:d8:98:8f:7d:ef:0b:03:28:
                    af:2d:99:bb:19:9c:ca:2c:14:68:e8:ed:65:4c:3b:
                    44:71:da:23:46:d6:00:b6:b7:c3:ac:d1:95:dc:15:
                    21:f6:ba:e3:17:e7:18:3b:34:d9:e2:67:cd:0a:77:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:7F:D7:EF:72:4D:07:87:9B:C1:2F:A5:19:9F:F0:68:06:EA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:26:9c:ab:17:05:2a:d8:c2:3d:b5:7c:99:37:2d:7e:96:
         ce:a9:98:3a:c7:b4:74:3a:ab:fa:c2:94:76:23:e6:b2:36:4c:
         4a:35:7c:66:e9:b9:3c:67:8f:7b:44:b9:0a:34:34:6d:29:02:
         1e:cd:19:08:e0:c2:e0:65:d1:70:81:bc:43:55:fd:b3:c0:17:
         61:04:c8:e2:3f:80:ba:c0:5b:f3:aa:74:df:b8:07:ff:d8:f0:
         7e:fa:17:80:fa:14:79:14:85:19:5c:3e:c5:03:67:f9:1c:28:
         9f:fe:e9:da:59:8a:b3:8d:50:97:31:be:ce:92:eb:95:f8:62:
         56:80:44:ab:40:f0:4a:de:e1:2e:0e:97:a8:a2:2b:bc:3e:49:
         0a:37:02:84:7c:1e:72:47:3a:ec:6c:58:c9:83:b0:1d:31:c0:
         78:4d:1a:40:4c:29:84:d3:fe:26:40:d4:77:72:e1:26:c5:ca:
         7f:17:19:5b:7a:b9:83:5c:d4:70:ec:21:28:1b:81:1a:70:4c:
         a5:10:19:0e:36:fd:7e:d3:92:c5:40:62:1e:f5:7b:53:fd:b3:
         42:54:91:02:15:4b:eb:b6:ef:c3:ec:e9:8c:dc:dc:48:46:16:
         c2:d3:3e:e5:b1:21:e1:00:a5:5c:07:47:8a:16:bb:24:a2:c3:
         c0:e0:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:53:41 2025 by rpki-client