Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
File:                     e12e2431-417f-3d44-b89c-e080667218a6.roa (raw, json)
Hash identifier:          Xu0lGQ5ecLhOWr/mTTaL3Nq0RCl+z30VcIBi8eH7vEM=
Subject key identifier:   54:9F:EA:DD:C4:C9:93:0D:3A:E8:AC:2E:B1:56:69:83:53:A9:DF:DA
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584B970CEFAB21A4BAC1F572B740
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     394080
IP address blocks:        172.110.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ef:ab:21:a4:ba:c1:f5:72:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=04ec2912-2bc8-4074-92c7-9f96d6817942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:4c:bd:fe:82:98:2e:e3:16:e9:77:77:e7:
                    9a:81:aa:04:9b:05:3e:d0:24:34:37:4a:f7:0f:72:
                    14:71:30:ed:06:9c:1e:e8:5c:cf:9f:d1:44:39:cd:
                    c1:39:97:81:f6:42:bb:c9:38:d1:a3:89:da:50:0b:
                    58:f7:5a:9e:2e:fc:06:3b:61:bb:76:88:ff:2c:89:
                    db:0d:16:27:0a:7b:b4:83:b1:d2:ce:e6:65:d9:72:
                    bf:a6:14:29:c1:a4:10:16:f8:5f:6f:63:31:01:ef:
                    0b:cf:29:7a:69:f6:e7:14:b2:eb:b7:f7:1a:cb:ef:
                    28:a3:36:05:af:5d:1b:3f:c5:43:34:de:d1:c9:eb:
                    db:9c:4d:29:cf:ba:47:35:29:84:4b:09:b6:82:f2:
                    38:ea:7f:99:c7:c6:d0:38:bd:d3:1c:87:57:81:68:
                    22:66:94:50:61:01:b0:fe:33:75:b2:d7:2b:e3:4c:
                    76:06:f3:48:fd:d9:1e:73:50:3e:6d:4d:6f:b2:ed:
                    e9:e9:dd:3c:a9:4a:50:b5:4a:93:04:a4:82:dc:2a:
                    aa:fd:6a:f4:e6:b6:99:b4:db:7f:85:c1:09:95:e2:
                    4d:9f:37:07:17:9c:59:fd:a6:e2:85:2d:a2:83:ee:
                    36:5a:ba:21:bb:3d:93:38:37:a1:7f:fd:b2:46:1d:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9F:EA:DD:C4:C9:93:0D:3A:E8:AC:2E:B1:56:69:83:53:A9:DF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0c:7d:37:6c:fa:b7:d5:f8:bb:88:e9:5c:c1:a0:f5:a4:f1:
         1e:9e:52:3b:14:a4:c3:df:16:7a:77:49:13:ec:4e:fd:c6:48:
         6d:76:06:47:39:86:1a:1f:12:26:6a:19:60:47:17:14:de:3f:
         0a:78:4e:88:bb:92:96:61:61:e9:f2:b2:13:68:68:22:db:d1:
         c8:ce:3d:d1:d9:b9:2c:f1:64:de:81:9c:b2:84:9b:2a:b2:6d:
         d9:c9:80:13:1f:8f:79:6e:6c:5b:e9:b6:f5:73:9d:dd:2f:9a:
         cb:71:23:bd:6b:1e:f3:b2:4d:b5:82:44:db:fa:1c:af:01:f0:
         28:98:d6:bb:ff:21:9a:8e:e8:4a:b3:04:36:ed:6f:36:a1:6f:
         a1:d5:3b:25:16:4c:4b:b9:81:31:ae:bd:a7:02:91:0f:75:e0:
         db:04:17:1f:29:57:b3:81:0b:bf:20:aa:68:61:81:6e:38:4d:
         64:d1:1c:49:3f:5f:26:ac:5d:fe:a3:b5:17:db:c0:f6:db:79:
         66:70:18:3a:d4:61:9a:bf:95:92:69:df:69:a4:7d:58:a3:08:
         37:0b:16:fe:3b:ff:99:a7:5c:64:4c:5b:1e:f0:9f:56:b8:27:
         21:db:06:e9:55:11:53:b0:67:6b:77:3b:b4:ca:74:75:5f:94:
         88:23:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:58:23 2025 by rpki-client