Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9e0fce7-7b6b-35fd-9522-c0f98528c4bb.roa
File:                     b9e0fce7-7b6b-35fd-9522-c0f98528c4bb.roa (raw, json)
Hash identifier:          d45wFLayZxqDpYfR3/TRUKR2AHtU9lGMVEnLXUTlBNU=
Subject key identifier:   D3:89:D6:E7:24:EF:6F:04:CF:06:C5:50:BB:C1:17:6E:5B:56:D9:64
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA0D24194F7DB1219F4754500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9e0fce7-7b6b-35fd-9522-c0f98528c4bb.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        192.119.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:41:94:f7:db:12:19:f4:75:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=e79a53b8-1e78-4eb1-a111-2850d2ac347e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:00:ad:f2:71:31:bd:76:d5:b5:84:42:39:
                    7b:da:0c:8e:f4:29:af:10:a3:bb:31:7a:88:fd:bc:
                    ac:e5:28:1c:d7:f8:77:b0:73:8a:e3:6c:47:0b:39:
                    a3:a1:e1:7e:2b:dc:8a:76:2b:c0:1a:fb:52:2c:c9:
                    0d:1b:e0:e2:18:44:7a:a6:96:76:bf:df:71:87:a6:
                    d6:b9:be:eb:81:9f:cd:6e:5e:a1:3e:f0:a9:2e:65:
                    c0:b0:e8:5e:c1:bd:84:f0:41:f5:93:2f:a2:d5:bd:
                    46:7f:f8:f8:74:e9:ac:91:03:e5:ee:b7:93:62:67:
                    dd:97:8f:ec:63:8a:9a:ec:a8:1f:55:88:58:bf:17:
                    40:b3:f7:56:28:72:51:82:e8:c4:ec:96:bd:a8:5e:
                    00:d5:8b:96:05:e4:89:b5:74:ee:db:87:68:8f:ce:
                    52:29:e0:b7:d5:e8:b5:b5:f1:7a:6a:a8:da:ac:31:
                    cc:17:7c:3c:0e:f5:e4:82:44:9f:db:a5:10:69:65:
                    47:de:3f:09:c5:c3:cc:55:d5:bc:45:a8:bb:3e:04:
                    26:8c:65:d2:bd:48:a9:dd:d9:33:de:15:1f:71:b9:
                    1d:74:80:f3:4f:39:d7:e3:9b:d3:d2:af:22:b4:80:
                    f9:d0:dd:90:c6:00:5b:87:38:51:45:26:55:a9:38:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:D6:E7:24:EF:6F:04:CF:06:C5:50:BB:C1:17:6E:5B:56:D9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9e0fce7-7b6b-35fd-9522-c0f98528c4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:c7:1b:ca:cf:3f:67:e9:e0:73:5a:c7:74:cf:6b:e4:d0:
         d3:fb:6b:cc:1c:b4:a4:61:db:a4:94:2c:c8:50:a8:b8:e4:64:
         3b:b2:3b:c8:37:48:6e:e5:5c:91:d1:c8:94:e0:27:4b:30:fc:
         b1:e5:21:af:71:1d:e5:59:9d:8a:ef:d2:ff:ee:4a:2a:e9:92:
         2b:bb:f7:f7:3f:8b:d0:73:3a:98:da:a6:a4:ed:b6:d7:af:0c:
         5b:01:43:7b:ba:64:78:dd:01:31:56:14:9e:0e:2a:d8:79:93:
         4c:21:a0:89:9d:30:f3:77:aa:83:64:6e:7f:89:8e:f7:3b:ec:
         e0:bc:4e:b2:7e:98:64:3f:f0:44:0a:05:12:2b:8a:01:d8:50:
         13:4b:e2:04:b4:96:d0:db:6c:24:98:37:11:61:0f:1e:54:a9:
         5a:fd:59:f1:77:cf:87:b7:88:5d:3d:35:c5:42:dc:27:9c:39:
         70:bb:9f:6e:ba:e8:b3:06:66:0b:cf:62:0f:0d:e6:1a:53:f2:
         c3:cf:84:17:99:9b:e1:4e:8c:ed:34:28:d4:b6:ae:bf:47:fd:
         3e:fa:9d:3c:8f:c8:79:a5:a3:38:b6:d5:fc:7c:bc:e0:3e:ab:
         f9:f0:0a:85:98:2e:54:54:c2:77:cf:b7:4f:e4:be:36:8e:ce:
         0a:8b:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:50 2025 by rpki-client