Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
File:                     05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa (raw, json)
Hash identifier:          q3OC6dnTV1kR7xNK9oLOeXHCTNTLCl7r0gGUrabyFi8=
Subject key identifier:   1B:B6:B2:CC:E5:21:35:12:92:BF:D1:62:D3:2B:2D:9B:49:5C:B1:DF
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584B99D791ECC82AA0D89AF78F10
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        104.192.137.0/24 maxlen: 24
                          104.192.140.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:91:ec:c8:2a:a0:d8:9a:f7:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=7d7c4092-1561-4c08-9475-88c1acf56430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:7f:64:2b:be:75:5d:2d:b2:15:fd:d1:ea:
                    df:9b:c1:ce:ba:5f:c6:8d:e5:18:4d:da:e1:1c:99:
                    ec:be:cc:7b:bc:6b:67:32:78:7a:fc:b7:7c:f6:21:
                    ff:3d:a6:74:a5:08:dd:b4:2f:bc:ab:9f:6e:90:71:
                    1a:8a:d6:cb:30:76:18:cd:dc:b0:86:e2:6d:3a:cf:
                    46:ca:0a:9f:20:49:9e:77:50:d1:b0:da:00:ed:57:
                    3c:ca:4d:83:8a:33:7d:9d:a5:a1:d1:d7:a8:43:ea:
                    1c:99:38:55:24:ac:fc:80:fb:7f:4f:b5:55:89:03:
                    8f:30:06:36:e5:7a:4b:9d:fb:56:4c:54:92:1e:d9:
                    c4:7b:4d:e7:31:f5:63:8b:39:78:32:c0:02:2f:be:
                    75:c6:c3:59:05:1a:4a:aa:7a:2a:fb:12:d9:16:af:
                    1c:94:9b:99:23:fa:a6:b4:bf:2d:07:52:2d:5c:91:
                    0c:ef:7e:86:a5:15:7c:b2:5e:9e:a0:1b:c0:ff:83:
                    33:d1:56:61:76:e4:51:af:1d:d1:ab:98:cb:32:dc:
                    a4:87:f8:2a:bb:05:6b:2c:d5:1a:f7:ea:38:80:85:
                    9c:2c:c5:51:24:72:82:a4:87:5b:0e:ef:50:56:14:
                    98:e2:2d:17:99:28:dd:37:5b:2e:e3:97:a5:ab:ab:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:B2:CC:E5:21:35:12:92:BF:D1:62:D3:2B:2D:9B:49:5C:B1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:e3:a1:2d:f6:34:f5:9b:32:4d:0a:e0:f8:f8:0c:e5:10:
         7b:e3:b2:3e:fc:04:7d:95:81:17:b7:28:72:7a:a7:06:cb:86:
         68:a6:b6:90:c1:d7:9c:cd:be:de:0e:ef:01:0a:69:6c:24:16:
         24:87:2a:8e:63:23:bc:0c:92:e3:26:de:86:97:9c:15:d6:dd:
         aa:4e:3b:e5:a6:e5:31:15:35:0c:59:af:6a:53:81:0b:e7:2b:
         13:97:c7:73:60:3a:d6:71:50:a5:7f:59:90:72:42:63:65:06:
         b2:c7:74:c8:de:0c:9f:ce:95:c0:ae:6b:22:a6:fd:79:2e:cf:
         7f:ba:b1:ad:a6:9d:a4:0f:35:31:c2:ed:f9:1c:e3:cc:2b:f0:
         f4:62:35:93:90:14:56:28:f6:cf:63:85:f6:1d:59:65:3b:59:
         8c:9f:71:35:a4:aa:a5:34:4a:9d:4d:72:01:d3:39:e0:96:b6:
         cc:57:11:c9:b9:b3:7d:7c:65:18:cf:d1:c5:44:23:84:f1:fa:
         40:94:a3:4b:78:02:43:12:a5:3d:5f:49:2d:25:0f:85:67:d7:
         41:c7:a3:2a:35:8e:e6:f0:49:14:65:64:bb:b3:ae:a3:e8:1b:
         eb:f7:b2:b5:29:1f:17:28:f4:0b:7e:d2:1f:a6:65:de:9f:96:
         a4:80:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:55 2025 by rpki-client