Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f9aae829-e4ac-3242-9bcc-3b9905de7223.roa
File:                     f9aae829-e4ac-3242-9bcc-3b9905de7223.roa (raw, json)
Hash identifier:          qRlsqtk0mCLeAvlA9s8qSBmIJIxZgJPoxzC9ejMMroA=
Subject key identifier:   11:7D:5B:77:EC:02:7A:05:C1:56:B3:FD:E3:A9:B2:4F:F9:BC:C0:A6
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B98886D894AF86816654B0080
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f9aae829-e4ac-3242-9bcc-3b9905de7223.roa
Signing time:             Tue 21 Oct 2025 13:45:27 +0000
ROA not before:           Tue 21 Oct 2025 13:45:27 +0000
ROA not after:            Mon 19 Jan 2026 14:45:27 +0000
asID:                     62564
IP address blocks:        216.75.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:88:6d:89:4a:f8:68:16:65:4b:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Oct 21 13:45:27 2025 GMT
            Not After : Jan 19 14:45:27 2026 GMT
        Subject: CN=37cff70a-c65c-49f2-8630-29ae31bc92d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:1e:a2:82:26:4d:4c:26:d3:5f:7c:7a:a0:
                    77:59:18:37:a3:c2:80:7c:96:e5:53:0b:f6:49:31:
                    e0:51:82:d8:4c:2e:bf:2d:7a:e7:1e:59:54:25:b8:
                    ad:8a:94:f0:83:47:bf:a2:5f:ac:c2:8f:d5:30:03:
                    d8:27:9f:a4:fc:df:6d:02:ce:48:ed:31:d1:f9:0b:
                    26:5c:a0:86:1f:5c:e4:9c:ca:81:a0:cf:64:ac:2b:
                    d8:9d:7d:bd:8c:b4:bb:64:3e:33:13:f6:99:f6:6b:
                    ac:9e:c5:73:87:58:e2:58:59:93:fd:ec:f3:46:77:
                    05:22:a2:3d:f9:89:cf:a1:fc:98:26:d5:8d:b5:1f:
                    61:c4:f2:45:d5:e5:96:c4:bc:bf:13:d1:15:ec:07:
                    66:30:1f:50:71:68:67:2c:4b:c0:22:da:89:48:db:
                    55:b6:dd:7e:73:84:55:63:1c:64:d0:ff:33:e5:6f:
                    c3:34:96:b4:f4:2a:5f:b1:67:2a:d8:3f:92:0e:96:
                    60:1d:ab:74:aa:7b:bb:fb:cc:ba:cf:7e:1f:05:cc:
                    a3:df:4b:47:e4:8d:e0:8a:c6:9f:24:3c:f7:54:08:
                    bc:a9:a6:f7:3e:de:7f:85:43:01:6a:2b:4e:c5:ce:
                    5d:0c:f3:a8:38:20:bc:b5:04:97:bf:da:7c:e1:6d:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:5B:77:EC:02:7A:05:C1:56:B3:FD:E3:A9:B2:4F:F9:BC:C0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/f9aae829-e4ac-3242-9bcc-3b9905de7223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:59:96:ff:1b:fc:a2:d4:60:78:4e:6e:84:0e:80:75:af:
         c6:dc:d5:48:c2:aa:a6:85:14:74:55:bc:14:a4:52:c7:ba:dc:
         73:73:2b:4d:99:aa:f7:96:19:24:21:7f:be:7c:b6:bf:ef:78:
         4d:14:cb:7d:51:e3:b4:6b:5e:29:43:b3:00:17:fa:0c:bf:1e:
         9e:2a:e8:31:86:1a:e7:71:ea:c6:e9:34:9d:e6:57:0c:a5:d3:
         45:22:bc:8b:42:f2:c2:2b:8c:03:de:3c:a1:58:88:1c:5a:f3:
         8c:f2:2f:85:e4:46:73:ae:a4:ce:94:93:76:45:da:f8:98:5c:
         49:c8:77:df:a8:db:fd:5c:c6:e6:8a:f2:df:0c:d2:d0:78:2b:
         75:d3:63:d4:2c:e5:13:1a:04:68:fe:10:c8:8d:47:a6:ed:81:
         a6:55:d6:52:e7:a0:31:1c:e9:f1:71:c7:3e:d2:ea:e4:ef:ac:
         1f:f2:f5:1e:2e:94:b3:cf:2a:22:4b:73:34:31:58:f4:03:a9:
         0c:15:0a:dc:fc:d4:ca:34:9d:73:fa:53:5b:e5:15:b5:47:b6:
         dd:f3:c2:e4:40:53:18:2b:ce:4e:83:bb:26:0c:f5:07:ef:36:
         e0:ce:ee:5b:28:98:43:55:c2:0b:2f:08:4b:58:e1:63:ad:ca:
         eb:f6:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:34:20 2025 by rpki-client