Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa
File:                     31e5d2f4-7f67-3d06-8455-9039ef65a131.roa (raw, json)
Hash identifier:          u8i8SGtHaPP2Tg2yQuC9iyVNuF4eYEUZsB7d6So7rI4=
Subject key identifier:   93:5C:91:3B:BB:6B:C8:89:C5:16:83:42:D2:A3:71:46:4C:80:5E:45
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584D60D2D5301EC396A95283AB40
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa
Signing time:             Fri 03 Apr 2026 00:23:59 +0000
ROA not before:           Fri 03 Apr 2026 00:23:59 +0000
ROA not after:            Thu 02 Jul 2026 00:23:59 +0000
asID:                     30690
IP address blocks:        205.173.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:d2:d5:30:1e:c3:96:a9:52:83:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Apr  3 00:23:59 2026 GMT
            Not After : Jul  2 00:23:59 2026 GMT
        Subject: CN=025884fc-3e50-49be-9b3b-5269ae6bfad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:b1:3d:9f:d6:6b:ac:60:45:48:c0:85:15:
                    9f:aa:41:2a:24:bb:c8:75:a7:9c:66:a3:ff:d0:70:
                    b4:a4:df:f5:51:c8:08:7d:97:6b:69:84:f0:f8:15:
                    67:91:ea:87:bc:e2:ff:83:a5:61:e7:c3:94:77:c7:
                    e7:9e:c6:75:78:80:ca:27:ab:73:2c:f2:9f:27:e3:
                    4c:4d:68:81:22:00:96:c7:6f:d1:6d:4d:d0:82:08:
                    b8:0f:55:36:40:50:28:9d:94:69:a7:37:bf:95:0f:
                    3a:f7:f0:2a:7a:02:f7:9b:f1:29:4d:e7:b8:13:8f:
                    a2:78:fc:b6:f7:b3:44:f0:d4:e1:05:7a:bf:e8:ad:
                    c3:c3:e6:1f:9e:03:01:60:a2:66:4e:14:ef:dc:bc:
                    7d:96:3c:9a:b1:70:b2:db:90:f6:7d:b1:e1:6d:59:
                    e5:cd:2c:8a:08:6b:a4:07:24:81:ef:ae:70:5c:4c:
                    c9:f7:b4:6b:bc:af:1c:ff:4b:6a:f9:01:c7:73:9b:
                    d5:f0:34:10:56:c1:b7:c0:e9:8c:e4:5f:03:6a:32:
                    b1:4a:eb:25:22:40:2d:bf:2a:a7:f7:4b:61:2c:eb:
                    4a:e8:cc:3a:1a:aa:a3:0f:3d:5e:11:31:f1:4a:d0:
                    02:b3:e8:6a:3a:70:24:94:6d:d3:87:b5:a7:4f:81:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:91:3B:BB:6B:C8:89:C5:16:83:42:D2:A3:71:46:4C:80:5E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/31e5d2f4-7f67-3d06-8455-9039ef65a131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.173.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:64:64:f5:7f:36:71:f1:fe:35:60:59:e3:19:df:2d:d1:06:
         54:67:75:ce:7e:53:b8:86:84:18:e5:86:26:ab:ca:e5:fa:50:
         b4:c9:b9:09:93:17:72:f5:f8:5e:e9:44:bf:d2:6d:8d:5c:e1:
         e1:b6:2b:0f:30:c2:42:43:ea:9f:3d:c0:92:64:9c:ba:6a:02:
         28:d0:00:cd:3a:d2:1e:f5:5a:1d:87:4f:1f:82:7f:07:ea:e5:
         29:b2:3b:06:8b:74:c2:1b:bf:3e:e4:7d:86:a9:1a:28:41:9e:
         8b:cc:65:e8:44:19:b0:29:95:d1:32:6f:ad:57:fe:f3:1b:40:
         fc:c0:7e:70:d4:f4:8e:f9:c2:9f:13:03:94:c9:9c:ac:b4:aa:
         1f:ba:a5:66:8d:a1:72:bc:59:79:07:c8:b7:e2:d8:93:d9:56:
         1d:42:99:1e:1e:e5:c8:5f:41:9a:ad:a0:6e:b2:c3:6d:0a:af:
         a7:65:ee:93:d3:2b:2f:77:80:86:c8:4f:0d:2e:0a:12:b2:60:
         f2:cf:b5:0f:45:ed:38:9d:40:8d:70:f1:f8:d6:11:7e:f0:1f:
         8f:4c:6e:5f:bd:7f:a4:90:6f:76:17:1a:88:29:f6:f6:e1:83:
         8b:7c:9d:bf:1a:8c:66:6a:56:6f:a5:49:e8:06:12:4f:32:0e:
         d7:90:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:08 2026 by rpki-client