Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa
File:                     cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa (raw, json)
Hash identifier:          /0A+qWYWq6D4wkD7NvKtAphjD2dR/IuujHJmwwv1UgE=
Subject key identifier:   A0:C8:9F:7A:6E:CF:51:0C:65:D5:59:0B:40:48:FC:0D:10:7A:D1:EB
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584BA932694E677C04A09FC6FC00
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     11659
IP address blocks:        169.147.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:69:4e:67:7c:04:a0:9f:c6:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=3a98ff4d-9873-4cd2-8e31-c2360b8c79c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:f9:75:67:0c:b9:df:ee:64:73:8a:3a:44:
                    99:33:cd:b2:11:a9:e7:f9:c1:67:04:8b:a4:8f:36:
                    48:99:96:a4:95:fc:cd:51:65:d9:74:be:b5:39:79:
                    5d:84:2e:46:45:2d:03:fa:20:df:3b:6d:04:fe:70:
                    47:ba:0b:5d:16:f1:c3:c7:e7:66:18:c4:e1:f9:5b:
                    2a:53:69:ff:d3:7d:13:ae:86:57:96:15:a6:82:78:
                    e5:ce:35:e7:29:dd:77:3c:59:b6:21:a4:2f:2d:78:
                    ec:93:21:26:e3:70:55:0a:ae:34:32:ef:1a:0b:70:
                    b7:c6:6e:b8:5e:4d:5f:8e:81:27:23:df:ac:69:a6:
                    94:38:f4:34:99:90:00:43:a7:89:eb:01:75:11:24:
                    ed:07:8b:e9:00:d7:5f:93:87:f3:7d:65:c6:4c:67:
                    d7:74:7f:da:fb:25:b9:b1:95:9c:70:c2:0a:73:bf:
                    71:e8:08:e8:93:e4:bf:c4:6b:b3:b4:8e:dd:b6:2f:
                    23:e5:1a:28:8b:3c:84:27:23:0b:88:d3:82:a5:b2:
                    c3:fd:dd:8f:12:df:d0:eb:8a:d5:0b:b9:4f:d9:a5:
                    09:f5:94:d6:26:d8:96:e9:b5:83:08:c6:52:94:20:
                    5d:c6:0a:80:ad:cf:0c:d0:fa:74:10:73:e1:99:0a:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:9F:7A:6E:CF:51:0C:65:D5:59:0B:40:48:FC:0D:10:7A:D1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/cfdd0aa0-c060-3e8b-adbb-7c3c343d2bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:f4:e1:e0:f0:ed:59:4e:38:a1:51:49:0f:33:f2:8e:6e:
         5f:70:ec:f3:45:2e:1d:0c:af:06:b0:d5:8e:68:f1:90:2c:c5:
         18:3f:14:fb:f6:2f:b2:69:44:62:0a:cd:c2:60:b9:81:2a:03:
         30:6c:33:f7:49:74:f8:4d:2f:e4:ab:36:c8:36:43:b1:ef:de:
         be:3c:a5:8f:d4:d0:a2:15:c2:f0:c1:c3:23:60:ed:2f:68:0a:
         35:27:94:75:29:ab:ab:ac:1d:40:ca:6f:45:fc:b2:0b:ae:a0:
         1a:36:9c:ef:b3:98:47:70:4a:58:09:44:9a:4a:70:53:d4:6f:
         38:f2:b9:90:f3:b7:22:ee:36:50:27:af:6c:51:61:8b:15:74:
         8e:62:48:9f:69:07:f7:b1:90:80:f7:7a:1f:bb:45:6b:d9:a8:
         95:b0:f4:bd:ac:cb:45:67:46:d5:54:3d:ee:8d:5c:ff:df:af:
         09:75:06:7d:ea:e5:ef:fd:54:bb:3b:e3:ba:4a:1c:61:17:1a:
         7b:97:03:a2:05:e3:76:4a:21:90:b6:1a:7f:0c:65:fb:4e:44:
         2e:56:e1:ed:8d:36:f7:bb:db:fb:68:61:7c:98:6f:80:a9:d8:
         6a:30:99:bd:83:d0:c1:bb:80:e8:06:c7:65:63:1c:18:48:6d:
         75:f8:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:46:08 2025 by rpki-client