Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
File:                     0a4a278a-43d9-34d7-b741-e7725dd4623c.roa (raw, json)
Hash identifier:          XvoI4bE6bHPq8q3W//X07YYME6YrhF6G+Pw8rBSUuSM=
Subject key identifier:   AF:62:7F:5E:12:3B:76:43:4C:25:0D:79:53:E0:82:3F:DC:5B:A4:A5
Certificate issuer:       /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Certificate serial:       010D0C9F4328584BAEC7B1D847E61728B46AEB80
Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     11023
IP address blocks:        209.251.33.0/24 maxlen: 24
                          209.251.34.0/24 maxlen: 24
                          209.251.35.0/24 maxlen: 24
                          209.251.36.0/24 maxlen: 24
                          209.251.37.0/24 maxlen: 24
                          209.251.38.0/24 maxlen: 24
                          209.251.39.0/24 maxlen: 24
                          209.251.40.0/24 maxlen: 24
                          209.251.41.0/24 maxlen: 24
                          209.251.42.0/24 maxlen: 24
                          209.251.43.0/24 maxlen: 24
                          209.251.44.0/24 maxlen: 24
                          209.251.45.0/24 maxlen: 24
                          209.251.46.0/24 maxlen: 24
                          209.251.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b1:d8:47:e6:17:28:b4:6a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=767d6455-95f4-4f8b-9065-37e70970101c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:24:4d:ac:c4:23:bd:8f:ae:64:0d:39:81:
                    8d:fa:0e:e3:de:a9:fc:86:9f:d6:35:d9:63:13:04:
                    67:bc:88:a3:f4:9b:cd:3c:83:25:f2:ac:a0:b3:9a:
                    7d:20:3b:e7:85:5b:bb:61:57:45:6c:d9:74:09:ce:
                    7a:e2:21:95:1a:53:cc:cb:0c:82:16:b3:27:f1:aa:
                    77:e7:9a:18:9c:6d:03:9c:bc:32:d9:01:95:76:ed:
                    eb:20:93:3b:97:1f:a5:cb:da:52:85:f7:b6:ba:21:
                    fa:16:0d:3b:d6:85:4b:f2:62:4b:55:e4:64:ec:6a:
                    78:03:87:4a:7b:95:ea:96:45:ea:d0:41:55:7d:45:
                    40:13:ee:76:89:0c:5e:30:9c:e2:9e:0f:b7:40:85:
                    97:34:86:e6:fa:ad:23:70:d6:18:6a:f8:bf:16:57:
                    65:e9:9c:fb:3c:93:1f:35:2d:6a:62:15:b1:4d:a9:
                    f0:75:d9:09:71:a3:e6:27:5f:45:bb:fa:0e:d1:bf:
                    ee:88:53:a7:de:7b:49:61:eb:a3:2f:4f:4b:95:e8:
                    47:61:e0:2f:bc:38:9e:8f:d3:90:96:40:e6:e5:7f:
                    8b:5e:ea:09:a7:68:2f:37:31:9c:85:43:b1:9a:bb:
                    2d:3a:8a:42:e3:ac:59:b4:d8:d0:21:2a:3f:fe:af:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:7F:5E:12:3B:76:43:4C:25:0D:79:53:E0:82:3F:DC:5B:A4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl

            X509v3 Authority Key Identifier:
                keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.33.0-209.251.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:4e:00:ce:fd:d1:cf:9a:92:cb:c5:cf:46:f9:5d:b0:7d:
         aa:bf:37:2e:c9:60:e8:7b:a8:22:06:1f:ff:5f:c7:f8:97:cc:
         d1:16:95:5b:5c:2e:a2:62:1d:ca:de:c1:19:4a:aa:d9:29:34:
         a7:8e:49:1e:ad:db:d6:fb:4c:4c:30:c2:74:5c:89:67:aa:ad:
         b8:5a:74:5a:9b:02:b8:ce:fa:35:a1:19:2b:e8:8a:57:d0:29:
         dd:86:eb:e8:e2:04:fd:c5:81:a5:a3:e2:4c:e8:bb:3c:43:ba:
         f5:14:0b:a1:16:b5:ab:c0:70:b5:a5:28:cd:ce:08:8c:8b:e6:
         12:c8:5c:12:47:3a:98:b9:bd:12:22:3b:ec:ab:06:94:37:1a:
         6b:d7:06:b4:ca:1a:b2:93:d3:0a:10:b4:ad:e4:da:6a:f6:b5:
         8f:ba:dc:f3:16:72:ce:e6:41:50:c4:b4:1c:fb:c0:7e:07:20:
         1f:10:ec:8b:85:ca:a1:62:21:82:43:27:27:a4:e2:fd:58:1a:
         0c:26:e7:04:80:4e:d3:33:16:37:61:5a:ff:3d:f9:c7:c8:c8:
         08:68:0b:81:de:24:e2:07:dc:1c:1d:11:7e:a9:fb:4a:32:11:
         b0:37:61:9f:e7:39:fc:89:77:c2:f4:b9:56:2e:82:a3:71:31:
         92:61:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:59:53 2025 by rpki-client