Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa
File:                     d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa (raw, json)
Hash identifier:          Cn40aY+7uYVpHUV3Z6Vmv+Kvmv9bitzHFFlWqOsvk54=
Subject key identifier:   39:FF:33:84:40:F1:E1:A8:51:24:C2:7A:FB:42:52:37:63:A7:DE:1B
Certificate issuer:       /CN=3133c6b3-ff40-49eb-bad3-65967c11dca0
Certificate serial:       010D0C9F4328584BB2F7D0E86891476081AB69A0
Authority key identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     36236
IP address blocks:        208.67.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d0:e8:68:91:47:60:81:ab:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3133c6b3-ff40-49eb-bad3-65967c11dca0
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=947d48e2-55c1-4d0f-b4a3-4920816427e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:e1:6d:fc:a6:fa:25:79:cc:3f:c3:81:fd:
                    8f:ef:2f:f1:e0:31:f5:75:25:0b:27:00:a3:2e:72:
                    39:c0:8c:0f:a4:f4:bb:20:e6:4c:f5:eb:54:ea:da:
                    9a:bb:65:ed:f8:c2:f2:06:3f:4d:1f:72:1b:88:89:
                    93:84:04:7c:e2:82:54:7d:ba:78:a9:ff:81:22:9f:
                    61:24:e7:9d:0c:20:b5:57:d2:a3:f8:c3:f4:78:2e:
                    85:31:1a:8c:fb:93:04:5d:42:dd:c2:77:69:57:6a:
                    77:53:53:d1:31:de:77:7c:4b:bf:0f:d0:ce:0a:ff:
                    16:80:3c:f8:e0:94:9f:07:fb:10:f0:16:69:3b:4d:
                    d4:54:22:ad:d8:2b:35:b8:8a:8d:ad:57:51:4a:2e:
                    b7:4e:24:6a:72:fb:64:a9:4e:9e:26:89:09:56:5b:
                    a2:27:89:ed:c7:84:59:b4:15:f8:7b:b0:75:09:9a:
                    14:f7:23:75:49:aa:37:32:d9:79:f4:54:4a:fe:ae:
                    57:18:b0:16:af:52:00:25:16:43:1b:7c:df:d5:8b:
                    22:07:fb:66:53:49:c8:6f:ce:f9:72:28:fc:8a:c4:
                    12:5c:02:65:e1:79:93:1b:16:5e:7c:b6:72:9b:d8:
                    53:75:38:41:fb:54:05:ee:07:0d:42:72:9a:19:2d:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FF:33:84:40:F1:E1:A8:51:24:C2:7A:FB:42:52:37:63:A7:DE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl

            X509v3 Authority Key Identifier:
                keyid:FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:9e:fe:29:8e:d4:48:b2:ee:45:00:45:ab:9f:16:ec:48:
         6b:97:9f:fe:74:b4:6d:1d:2a:44:32:33:a9:0c:41:3b:02:21:
         a0:ae:6c:7a:50:f9:2b:30:df:71:47:57:35:36:0b:a6:cd:b8:
         f0:4d:2f:f8:69:1f:f6:cb:38:5a:62:55:0e:02:55:76:68:53:
         97:ed:f8:91:fd:e2:b0:fb:af:81:be:b5:b0:df:3e:f7:5f:7d:
         a1:f6:98:1d:11:bb:27:14:5a:d4:ff:38:1d:6b:f5:8d:4c:cb:
         af:da:07:f9:fa:0e:60:87:f6:5a:fa:96:a3:23:23:9a:dc:5d:
         26:47:f0:02:b2:c2:45:12:23:92:bf:96:b8:b9:a1:08:8b:aa:
         56:3f:a5:dd:04:67:80:26:40:66:b8:d2:ab:9a:a9:de:f9:a5:
         a4:77:b2:58:08:f6:6c:99:d2:86:55:64:13:0c:02:b2:e4:c8:
         ef:a2:4b:73:85:48:72:67:d1:06:72:e7:bd:91:da:ea:fb:1d:
         78:4a:dd:5f:5c:bd:c7:55:9d:ea:12:60:8e:1f:ad:e4:f5:85:
         a7:fa:cc:71:33:56:55:ec:e0:6b:38:93:a0:f2:ec:1c:8e:81:
         75:1d:ba:17:db:ca:b8:55:1e:03:b1:58:ea:30:e9:58:28:7a:
         22:68:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:51 2025 by rpki-client