Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa
File:                     f13fc02f-a824-3a53-a360-617f1ec4209c.roa (raw, json)
Hash identifier:          oxeNfNGjLXr+7znUmM8EXbvDI+sZ0DgQANzcroELZxQ=
Subject key identifier:   4D:3A:14:AE:FC:F4:1C:31:5F:5D:F3:01:B2:10:C5:A9:73:CC:75:40
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584BB2F7C07333221B56F4C89DE0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     202
IP address blocks:        192.46.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:c0:73:33:22:1b:56:f4:c8:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=7f142606-0807-4f38-a8ea-3ba9534dbb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:6c:a5:31:69:a9:0b:93:5a:8d:af:63:6b:
                    e1:56:eb:cc:cc:be:e4:74:ca:83:a4:9d:18:ea:33:
                    cd:4a:a5:f5:cb:ea:09:b7:77:83:83:c5:48:c2:07:
                    e5:60:45:17:eb:a2:ec:b6:c9:f3:04:fc:b1:f5:0b:
                    2a:e2:5e:d4:5b:1a:73:6e:f3:96:fb:da:60:bb:55:
                    4d:c1:63:fc:1e:2b:91:2e:72:38:a2:09:4b:1f:8a:
                    63:4f:a7:91:71:c8:7b:b8:d4:7b:7e:4e:32:f6:34:
                    4a:56:d3:74:36:a8:71:d4:91:ce:f7:17:50:9e:62:
                    5d:01:14:e3:c7:9b:22:22:a2:fb:4c:05:f2:b7:c0:
                    2b:6f:68:4e:eb:f6:70:4f:ba:d4:f1:0f:7c:22:a1:
                    7e:ea:f5:4c:09:11:a3:7d:2a:3b:2a:5f:99:60:b8:
                    d9:27:49:91:85:ab:bc:08:02:f4:c5:57:df:db:ba:
                    c7:82:08:1c:6a:93:eb:90:67:8b:b1:bc:26:ef:67:
                    d7:94:07:16:93:0e:e8:93:b7:37:30:8b:f9:15:8e:
                    5f:56:83:94:d8:39:c0:d8:57:55:c4:0c:af:e4:06:
                    81:12:21:3f:41:5f:4b:c2:47:5f:1e:5a:01:30:da:
                    47:b0:5c:c1:4e:3c:41:c4:7a:74:69:c8:34:1f:8a:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:14:AE:FC:F4:1C:31:5F:5D:F3:01:B2:10:C5:A9:73:CC:75:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:3e:d1:30:fc:10:34:16:34:5b:99:f2:50:da:79:d9:16:
         f1:c3:2b:81:3d:0d:a4:a4:56:37:67:82:43:a0:88:cf:ee:bb:
         78:07:1b:2c:2a:31:cf:ca:52:6e:f3:ef:26:56:84:f0:38:51:
         82:e6:e2:c9:a7:61:6b:c6:b2:9b:c7:0a:66:7e:9a:18:b5:3b:
         dd:0c:c5:17:c6:d9:3a:1b:77:99:b9:88:fd:42:5d:3d:7c:3d:
         77:bb:7d:11:ae:df:ec:97:e9:67:84:0b:e7:1c:6a:8e:69:69:
         ff:a2:86:69:a1:bb:f1:03:9d:d0:53:97:0a:b3:96:9e:5d:46:
         ea:f3:8f:f5:bf:70:f2:65:a5:28:62:19:73:c6:44:83:eb:55:
         92:19:7f:6d:31:a8:b2:a5:bd:14:34:0a:fb:24:01:d4:be:c4:
         aa:e6:02:03:d4:b1:ed:c3:7c:1d:f2:1a:d8:e5:81:95:92:7f:
         06:75:44:0a:4f:b9:eb:41:11:28:0d:af:08:94:1b:66:dc:38:
         3c:c1:21:be:9a:59:5a:15:cb:95:1e:88:62:07:bf:50:e7:b4:
         3b:5b:0f:e8:b2:40:c0:1c:14:9e:ae:2c:24:69:25:e4:7f:5c:
         74:a7:b1:24:1a:ea:cb:9e:a1:35:6e:b4:dd:ce:37:11:9d:ef:
         23:72:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:40:39 2025 by rpki-client