Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/14970f76-9005-3602-bb58-8e29427e4423.roa
File:                     14970f76-9005-3602-bb58-8e29427e4423.roa (raw, json)
Hash identifier:          Qr58ZaiI++20V5RTF2nFqHQIBLnxgjluRlepn8Idf0o=
Subject key identifier:   B9:17:11:BA:A6:B0:0B:77:29:1C:89:94:53:D0:08:EE:F9:9E:0E:1D
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584B944227EDC1373871BB331B80
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/14970f76-9005-3602-bb58-8e29427e4423.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     399244
IP address blocks:        208.92.232.0/24 maxlen: 24
                          208.92.233.0/24 maxlen: 24
                          208.92.234.0/24 maxlen: 24
                          208.92.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:27:ed:c1:37:38:71:bb:33:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=d892ccef-dd54-4d87-bc6e-18540f7648c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:f5:75:71:9e:d7:3c:4b:84:d7:af:e1:d5:
                    ba:7d:8f:89:70:71:69:9a:c5:0a:ce:da:b1:7a:32:
                    17:5b:cc:fb:90:4a:a3:a3:3c:c3:bb:28:17:44:54:
                    2d:4d:b1:6f:15:f7:e9:90:37:91:01:84:31:9b:78:
                    ca:51:82:b0:ad:45:7e:ef:b7:da:c4:fb:1b:1e:15:
                    18:92:1a:34:89:80:58:e2:cd:9f:59:59:ab:d7:26:
                    ac:50:d4:8e:da:0a:c1:8a:18:98:b6:f2:74:4e:3b:
                    82:f4:21:36:32:13:d3:3a:58:df:e0:c8:9e:3c:91:
                    dc:15:42:aa:92:7c:12:19:67:c8:6f:2d:91:74:2c:
                    1a:f4:78:f8:a1:ce:12:8f:37:3e:17:81:5d:20:21:
                    c1:e0:8c:ec:a0:63:26:bb:ee:a9:39:d4:7b:12:e9:
                    cc:52:26:3a:d4:93:f7:e4:a4:f4:50:e3:c5:f8:4e:
                    68:a8:2d:af:0f:17:b6:83:6b:00:91:5c:26:d2:6a:
                    00:a1:4a:9d:24:8c:24:d0:b1:c7:4a:2c:63:bc:72:
                    b7:de:db:32:eb:5e:cb:f3:b6:16:b5:32:d2:ff:f4:
                    63:94:57:9d:09:d8:c6:15:79:05:c9:eb:49:8f:2d:
                    51:a2:02:05:6e:06:34:9a:b6:02:e9:ba:53:d4:8a:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:11:BA:A6:B0:0B:77:29:1C:89:94:53:D0:08:EE:F9:9E:0E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/14970f76-9005-3602-bb58-8e29427e4423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:e5:60:ba:9d:dc:31:9f:32:92:83:0f:71:a1:b2:b2:92:
         7e:e9:fd:36:75:64:ba:01:fb:32:c3:cc:92:7b:c3:94:dd:b8:
         94:07:79:66:a1:62:a8:86:ea:fe:ed:a9:bb:e4:8c:af:1f:50:
         fd:73:3b:52:04:bd:67:74:87:02:e1:94:de:fa:dd:a3:22:db:
         1d:7c:f8:a9:65:71:14:0b:a6:62:51:63:54:ab:bf:3e:48:4b:
         97:37:6c:45:88:65:35:c6:e8:9f:43:4c:48:cc:e8:f6:55:a0:
         71:db:98:57:85:32:37:e1:f7:75:01:e7:a8:de:4a:55:e4:f5:
         44:f4:16:91:e8:38:d5:92:a6:48:48:b6:e2:5a:1a:fe:33:a1:
         ca:88:91:f9:5d:60:2f:92:3e:51:05:f4:1f:60:da:1e:53:47:
         bc:d7:f6:07:87:35:a7:3b:46:16:fb:1b:34:dd:53:1f:f8:18:
         30:91:de:e8:b7:ec:b6:36:49:95:3e:bc:c1:b7:60:26:2b:9a:
         01:45:31:25:a2:80:b8:c0:ce:64:56:b3:fe:51:c1:66:e4:1b:
         bd:f3:1a:59:1e:7d:5b:fe:bc:1f:c3:b3:e9:37:61:01:c3:7f:
         c7:54:c6:26:03:f0:ac:d7:da:e9:68:3e:37:f8:69:1c:93:0a:
         f0:83:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:24:24 2025 by rpki-client