Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d890ad2a-7ae1-3cae-b25f-80422226f650.roa
File:                     d890ad2a-7ae1-3cae-b25f-80422226f650.roa (raw, json)
Hash identifier:          TeinOL40gzoQrnEaJGX1FnjoTU5/ZPwDdLatDqS+e5U=
Subject key identifier:   C5:C1:7D:B9:3C:A4:8D:78:40:5F:AE:3A:8D:37:AE:3B:42:17:1B:94
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B7B0CA4796AA298B3573B2F80
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d890ad2a-7ae1-3cae-b25f-80422226f650.roa
Signing time:             Sat 11 Oct 2025 00:17:36 +0000
ROA not before:           Sat 11 Oct 2025 00:17:36 +0000
ROA not after:            Fri 09 Jan 2026 01:17:36 +0000
asID:                     9304
IP address blocks:        207.180.12.0/24 maxlen: 24
                          207.180.13.0/24 maxlen: 24
                          207.180.14.0/24 maxlen: 24
                          207.180.41.0/24 maxlen: 24
                          207.180.42.0/24 maxlen: 24
                          207.180.43.0/24 maxlen: 24
                          207.180.44.0/24 maxlen: 24
                          207.180.45.0/24 maxlen: 24
                          207.180.46.0/24 maxlen: 24
                          207.180.47.0/24 maxlen: 24
                          207.180.48.0/24 maxlen: 24
                          207.180.52.0/24 maxlen: 24
                          216.75.152.0/24 maxlen: 24
                          216.75.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:0c:a4:79:6a:a2:98:b3:57:3b:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Oct 11 00:17:36 2025 GMT
            Not After : Jan  9 01:17:36 2026 GMT
        Subject: CN=dbabf124-ec02-4527-93bf-fb73c0366986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:e2:97:69:8b:f9:ed:fb:5d:da:65:d9:9a:
                    bc:0e:10:2f:ec:1e:92:9f:b5:8a:60:82:ab:78:85:
                    ec:29:15:34:f4:24:9a:9f:73:75:50:a7:42:1f:3f:
                    eb:82:de:7e:07:00:6f:55:d9:4e:ba:20:0a:88:35:
                    1e:fa:32:08:77:fb:2f:dd:8b:a8:96:43:55:5e:7a:
                    cb:0a:a1:80:e0:a0:9f:9b:0b:12:48:ea:e4:be:96:
                    b2:1f:06:1b:15:21:22:2a:f7:02:2b:ed:39:90:57:
                    17:90:0d:3a:96:d7:97:0b:29:8b:22:e3:48:f1:1e:
                    2f:98:03:cc:8e:16:06:ab:ae:f8:0a:35:cd:bc:12:
                    88:0f:5e:54:a7:f9:59:89:e2:87:e6:43:d8:bb:38:
                    9f:c3:7f:a3:3f:14:b0:58:b2:bb:19:64:9e:c1:9d:
                    00:41:af:9f:25:94:a9:57:8d:4a:b4:2f:6a:7a:c9:
                    ce:ad:41:32:c8:04:71:56:c4:2f:7d:f8:46:68:3d:
                    cd:49:0b:cc:15:42:36:9c:f3:f7:30:03:7d:7d:49:
                    9f:f1:41:ff:e9:8f:4d:e2:98:aa:75:5e:80:d5:76:
                    f6:45:c7:4d:da:8a:0b:11:a3:73:67:89:db:98:ce:
                    77:3d:a7:93:14:b4:12:68:95:79:3b:fc:c4:f8:be:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C1:7D:B9:3C:A4:8D:78:40:5F:AE:3A:8D:37:AE:3B:42:17:1B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d890ad2a-7ae1-3cae-b25f-80422226f650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.12.0-207.180.14.255
                  207.180.41.0-207.180.48.255
                  207.180.52.0/24
                  216.75.152.0/24
                  216.75.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:26:1c:a6:3a:e5:b8:c1:a4:0d:7f:33:7e:b8:ad:a8:66:bb:
         25:f5:c7:92:fd:45:b6:69:da:f9:5c:d8:5b:74:70:09:f1:e6:
         7a:38:b4:98:b1:fd:e6:7a:a3:31:92:a8:b3:6b:84:93:4b:ad:
         13:7d:98:2c:70:02:d6:58:c9:b3:71:f5:e0:43:c1:09:80:dd:
         5f:d2:05:ba:89:aa:5c:2f:0d:ef:b1:8a:3b:2f:67:a0:2f:83:
         65:52:ab:89:76:90:4b:b4:ec:2f:c8:82:00:09:80:59:fa:c0:
         ed:05:fa:af:ca:49:54:ec:99:de:e2:df:d8:d5:5d:d8:de:28:
         d5:3c:bd:aa:01:dd:07:18:e1:bf:81:28:83:fd:7c:0c:36:03:
         98:16:e0:5d:09:10:01:d6:50:35:48:22:18:d2:ba:58:8a:73:
         68:7a:db:0d:68:f1:e9:83:01:4f:67:a5:78:11:85:61:b4:63:
         7d:49:99:f8:17:a3:ed:5d:d8:4a:4f:ad:d0:9e:e7:96:f2:bc:
         97:a3:3c:93:72:dd:78:d2:e2:f9:83:0e:67:9d:ff:4d:04:a4:
         fc:b7:4d:dd:09:ba:33:e3:0c:e0:d7:1b:76:83:54:b1:ae:a2:
         a0:62:ec:c6:93:72:01:bd:92:2e:c8:e4:38:61:ae:93:aa:28:
         f8:66:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:28 2025 by rpki-client