Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
File:                     03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa (raw, json)
Hash identifier:          I0RfIHi71Wgl4HT+4pO+hWWHbZDNTLnWwQEEyaTfj48=
Subject key identifier:   30:78:B4:EB:BF:6E:D4:63:26:98:82:40:F6:1C:70:D5:AE:C9:B1:40
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584BA39D04211CC514BD67914650
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        104.218.201.0/24 maxlen: 24
                          104.218.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:04:21:1c:c5:14:bd:67:91:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=3698b870-8cbd-4696-9690-92d18e16ee81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:5e:20:d2:54:48:e9:5a:0c:58:aa:1d:fc:
                    24:c5:86:1d:5e:f7:bb:7d:5a:d7:e8:12:c0:26:5c:
                    6c:59:4b:7c:cf:5a:01:0b:e6:c1:2a:6b:6a:51:44:
                    d4:bb:7e:80:26:a8:14:0e:2a:61:6e:d8:00:99:1b:
                    80:2d:e0:52:35:13:da:5e:04:33:e8:35:6b:61:fc:
                    6e:10:ea:79:7f:6f:2b:28:1e:f3:02:c2:9c:7a:35:
                    1c:e2:1b:42:bd:dd:aa:7f:2f:08:49:85:52:32:c8:
                    a9:60:50:31:3d:03:99:fc:79:65:b3:c9:77:28:7c:
                    f8:36:96:a7:65:73:88:30:e9:28:ee:71:07:cd:8e:
                    e1:da:9a:2e:f3:e6:61:35:5c:49:51:08:66:db:5b:
                    4f:9b:12:9b:e1:03:7c:7c:5f:59:c5:5b:38:dc:7a:
                    84:a5:98:ec:e9:61:1a:e0:58:93:b7:d6:f4:31:72:
                    70:54:b1:d2:39:b9:d9:5f:0f:f6:bd:c6:1c:66:6f:
                    aa:e9:7a:b1:5d:25:65:2f:b5:2e:5f:bd:3c:e6:57:
                    f0:3d:4d:40:4a:eb:00:ff:e6:b5:09:ec:67:4c:94:
                    7a:36:70:5e:12:49:30:08:44:da:e1:fb:eb:0d:81:
                    bc:b9:e7:f2:31:95:7d:94:f1:b8:93:37:b6:aa:c8:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:78:B4:EB:BF:6E:D4:63:26:98:82:40:F6:1C:70:D5:AE:C9:B1:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.201.0-104.218.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:63:9f:bb:15:b9:c4:c4:9b:46:31:78:99:8b:1d:73:e9:
         fa:99:a7:eb:71:43:38:85:47:69:8f:00:a2:12:83:29:0e:05:
         4c:7a:d1:23:5d:df:84:88:bc:d7:92:49:26:1e:2a:19:c3:d7:
         e3:18:b4:de:20:17:dd:2b:57:0b:ee:32:63:6e:8d:43:5c:9f:
         be:0c:cb:50:f8:b7:6c:e5:83:4f:aa:54:7d:fa:bb:5b:8a:91:
         79:4e:07:f4:e0:35:26:fe:e1:e5:d5:2a:0e:f1:bd:c9:99:2c:
         d8:95:c0:69:78:5e:14:41:52:9f:86:cc:3d:3f:8f:9d:c7:8c:
         e4:d2:5c:27:dc:a9:b5:9a:1e:0b:25:be:95:6c:8f:aa:df:7e:
         a4:78:89:67:ce:8c:90:cc:22:95:2a:57:b3:fc:86:8a:47:93:
         13:99:bb:07:2a:59:dd:6b:fb:62:55:1c:ef:75:37:1d:9a:83:
         81:47:a3:60:a0:dc:89:62:e0:48:cc:fb:ca:b7:68:ca:d9:82:
         e4:2f:18:d2:9f:62:cd:28:fc:11:4c:12:41:06:1d:2c:35:e5:
         aa:1f:1a:0f:b8:54:c4:de:31:e9:cf:f4:ca:de:6b:33:3e:ba:
         78:0f:b6:29:6d:aa:04:a3:c6:50:10:be:98:b4:f4:02:5d:7b:
         9c:2b:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:08 2025 by rpki-client