Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa
File:                     abb33762-99e5-3a8a-be57-c836296c219e.roa (raw, json)
Hash identifier:          zKCWySViHeLH9iJZBz5Ctj63itj6WVZJCnW51FkRABs=
Subject key identifier:   6E:67:C8:16:B4:8A:D5:BE:A2:52:38:34:AC:48:0F:07:C7:E0:65:53
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA10408D26768977F284F040
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     4997
IP address blocks:        208.39.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:40:8d:26:76:89:77:f2:84:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=9ccd88e0-7e8e-45c4-8d52-c452b178ba7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:18:b3:a8:3d:0d:0f:40:1d:76:00:63:32:
                    96:1e:60:7a:82:95:54:5e:e4:01:35:6f:af:64:72:
                    29:1d:a3:b5:44:f1:45:0e:ba:06:62:25:a4:15:c8:
                    97:47:fd:19:bc:95:72:4a:7d:f3:1a:89:f1:40:72:
                    a7:f8:8a:b4:a9:45:67:b8:5c:0a:ae:78:a1:ff:43:
                    55:9d:1f:bf:e8:c2:07:94:89:f3:a1:f1:de:69:54:
                    16:2f:39:b4:da:42:a3:22:1f:2f:ef:25:0e:d4:a6:
                    fd:7e:dc:79:54:93:d8:04:ce:be:f6:c4:48:cc:43:
                    6b:b4:f2:01:42:54:29:d1:fa:3d:9b:74:b3:31:e4:
                    2c:c5:a5:6e:d3:21:54:9f:8a:49:43:a4:98:64:21:
                    8e:f8:06:47:df:3b:9f:80:03:37:29:6b:78:68:b2:
                    89:c3:06:5d:80:f4:83:00:1d:3f:cb:ad:5c:76:60:
                    a9:70:1a:a2:8f:34:04:f0:10:86:c3:d2:1e:e0:63:
                    09:f0:f9:22:23:ba:cc:36:84:57:ad:ff:e4:ac:02:
                    1a:10:90:fb:47:fc:fe:82:3c:e3:de:c0:27:c0:a5:
                    0e:eb:07:20:24:59:9a:92:51:0d:74:ab:b9:e9:c2:
                    f4:30:22:c2:7d:f5:0d:95:75:6d:1f:05:46:02:5b:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:67:C8:16:B4:8A:D5:BE:A2:52:38:34:AC:48:0F:07:C7:E0:65:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:95:a4:c0:e5:b2:19:30:b3:57:dc:f8:7c:a3:ee:8c:04:
         17:9b:92:0a:59:57:ff:03:9e:0e:62:08:f5:4e:c3:35:98:03:
         fa:9e:15:26:c1:07:28:78:57:59:97:90:e1:fd:ed:96:18:79:
         6d:85:e3:16:d7:9c:90:58:ce:5a:1c:e1:7d:fb:5e:05:b9:47:
         08:86:79:23:b8:3e:33:ae:17:46:2a:a2:d5:68:43:3b:47:ab:
         20:34:07:79:33:ea:15:3b:c8:79:bd:60:3c:ec:be:ef:c8:56:
         0c:8e:e3:b3:7e:70:01:39:6d:93:68:14:40:8b:d1:81:91:b0:
         38:0c:b6:56:b4:1f:54:1b:1c:32:07:87:11:a5:f6:1a:0c:a1:
         f4:de:e1:3a:b9:5a:4d:b2:26:99:4a:6a:f4:b7:eb:7b:af:c9:
         49:64:06:be:58:9c:aa:e3:3f:55:79:57:b4:65:1a:ff:09:31:
         cf:89:b8:c0:24:85:2a:ac:4c:52:ce:73:1b:24:bc:1f:fe:7d:
         bb:27:12:0a:a8:a1:e2:1e:88:b1:bf:28:c5:a3:e4:09:47:3b:
         78:cf:a1:a2:2c:6f:ef:d4:76:b0:ff:e4:7c:89:6b:3c:f7:33:
         c0:f0:9c:57:c7:f0:f1:62:8c:3d:0a:d9:a0:34:4b:82:ad:b3:
         6e:58:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:02:51 2025 by rpki-client