Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa
File:                     c01671a2-3cf0-359f-be36-c8783323ae9a.roa (raw, json)
Hash identifier:          fuJNjjgp653MZpaeGUIB/MfpX2cScaVTu2JnO6e7IrM=
Subject key identifier:   50:3B:4F:F3:5A:BD:9B:49:C3:67:AB:08:DB:97:92:04:23:BF:03:B2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584BBFA5B8A01E254597209633C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     23473
IP address blocks:        104.145.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:b8:a0:1e:25:45:97:20:96:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=d70024f0-3ed9-46ab-84ea-ac47e05ab733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:d9:f5:7a:62:ec:17:ef:14:a2:ba:d8:44:
                    8b:69:cc:df:61:e4:6b:67:56:2a:79:90:39:b2:40:
                    98:2e:83:e2:f2:01:1a:5a:26:75:6d:99:de:19:1c:
                    8a:b4:c5:e2:44:6b:2d:9c:e3:eb:84:c6:bd:9a:18:
                    3d:96:20:b6:67:81:8d:40:03:7d:6b:20:e3:64:76:
                    21:52:f8:c4:0c:82:d6:e3:2c:19:b5:e3:df:7a:aa:
                    e1:12:be:37:58:56:3e:c6:19:45:8a:28:5a:ec:12:
                    6a:56:33:9c:86:cc:21:97:58:e6:77:a0:81:ba:ff:
                    8b:54:f2:1a:12:82:bc:40:df:ab:be:f3:4b:67:e2:
                    b1:de:79:19:39:64:8c:6a:d0:c0:d0:df:eb:31:92:
                    e3:e8:1f:8e:68:a1:ac:a9:73:44:72:26:4a:ee:12:
                    87:11:03:9b:79:84:ee:a1:73:af:f4:ca:10:01:2d:
                    90:4f:24:01:0d:44:8e:4a:a4:e5:03:b2:24:9e:1d:
                    2a:a2:dd:8b:bf:f2:ed:0f:7e:e6:0d:93:aa:5a:49:
                    5c:8a:a0:e3:06:4a:fc:88:68:10:37:c8:2a:af:f5:
                    4b:1e:ff:df:77:f2:79:97:52:89:cb:7f:53:13:e8:
                    52:20:9d:23:56:55:23:68:df:2a:f2:ea:c0:0e:d7:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3B:4F:F3:5A:BD:9B:49:C3:67:AB:08:DB:97:92:04:23:BF:03:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:24:4e:5d:41:f6:2e:ad:f1:e8:1b:f2:88:89:9b:9e:d8:
         bc:4a:0d:62:5e:6d:ff:cb:1a:b4:76:17:2d:17:e7:66:db:e7:
         78:69:86:79:4c:24:49:93:ee:7b:dd:d6:05:1f:36:ff:aa:7c:
         aa:09:20:ed:3a:d2:44:5d:d4:37:5c:d8:e0:08:7c:80:1b:8d:
         63:a4:45:23:b2:c2:cf:6f:19:ae:47:fc:9d:04:e1:72:be:04:
         c2:25:ff:2a:f0:79:47:bd:09:34:47:59:a3:93:c8:b1:df:21:
         5b:20:ad:dc:b6:d7:65:1e:55:d5:30:5f:07:b1:a8:c0:e6:31:
         72:8c:02:02:f0:32:cd:57:87:ef:16:f3:05:2d:fe:9d:60:33:
         94:07:7a:6d:e4:2f:9c:79:8b:17:30:7d:e3:e4:10:39:0b:88:
         13:3d:80:bf:38:4d:84:b2:72:64:67:96:4c:48:0e:9c:d6:c1:
         c1:8e:bd:de:17:78:40:96:75:a9:cf:7a:88:48:5a:b2:90:6f:
         2b:9e:52:0c:98:22:0d:e1:07:f2:22:c5:7e:bb:24:06:49:c6:
         2d:09:62:38:b0:ef:e8:6f:98:2a:ef:a1:de:89:e3:cb:28:82:
         7a:99:4b:92:63:a1:1e:a3:57:ce:44:0b:e5:95:19:f7:e2:25:
         a5:3a:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:15:48 2025 by rpki-client