Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
File:                     0700df42-2943-3ba8-bc50-05cd067eaeef.roa (raw, json)
Hash identifier:          N+KFuHJKACqKVw1g+mzpr/TF4MyWFq/E4AUC0kSSWPk=
Subject key identifier:   73:54:E5:93:25:D5:A6:3D:B5:E2:47:2C:03:AF:6D:58:73:2F:9C:72
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584BC10ADBA133626CEFA7127000
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     401099
IP address blocks:        199.87.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:db:a1:33:62:6c:ef:a7:12:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=e414f5a9-dad2-4de3-9cc1-915761b27c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:73:3e:97:07:6a:aa:47:72:cd:c1:fd:cc:
                    42:5c:76:74:66:e0:58:37:4f:95:a8:94:6e:43:d5:
                    d1:38:cb:e9:56:6b:c4:a3:18:7c:ff:2e:39:97:39:
                    60:2f:95:3e:85:85:e0:13:be:bb:d5:6d:d2:24:d5:
                    ac:06:64:73:6e:a3:2a:41:9f:d1:37:e0:a8:65:d1:
                    de:35:2e:3f:a3:dc:9b:0b:98:05:50:04:21:47:ad:
                    c1:e6:55:1d:aa:91:82:ca:16:36:70:f0:7f:e6:b3:
                    3c:6a:46:0a:ea:8b:ef:bb:cf:f9:e3:bc:ed:c6:3a:
                    b6:63:32:f6:f9:f2:8a:17:60:16:88:03:2d:0d:2e:
                    bb:be:c0:bd:86:76:1d:2d:a1:c6:2d:24:90:3d:8c:
                    72:91:8b:4f:8a:79:c9:ac:f8:cb:d9:d8:eb:55:f4:
                    f4:fe:75:09:6f:3d:3c:2a:84:16:a5:ce:70:4a:05:
                    9c:a6:ab:f5:ae:6f:90:6c:f4:b3:3d:2f:7e:80:c4:
                    c2:3e:ed:18:6f:93:bc:ec:ca:28:53:ea:3b:ec:c8:
                    18:ce:18:7f:a6:0f:46:ec:de:44:70:ca:80:36:1f:
                    94:82:de:54:36:58:0a:89:73:3a:7c:24:ac:2b:50:
                    88:b8:6e:66:5f:97:83:81:9c:12:02:5c:d3:b5:3a:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:E5:93:25:D5:A6:3D:B5:E2:47:2C:03:AF:6D:58:73:2F:9C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b5:30:e7:11:69:6d:89:99:90:08:bb:36:4c:1c:82:de:de:
         63:fd:2a:86:02:6c:92:20:15:5a:73:a4:7e:1b:5f:79:44:33:
         b6:b7:67:67:f3:62:6b:1e:b6:dd:6d:c1:33:d8:77:5c:b5:c1:
         3a:56:cb:ca:92:72:bf:7e:d6:6a:a4:fe:d0:77:b2:11:5c:09:
         04:ea:18:f5:7a:79:80:b8:c0:eb:69:a2:8b:da:31:38:0d:41:
         26:ca:72:59:df:47:35:bc:95:e7:68:84:1e:c1:df:25:40:68:
         20:fd:2e:e8:ce:2d:40:d6:93:58:d9:2e:c4:d1:91:a1:93:bb:
         80:0e:fc:1f:a0:2a:e7:47:fc:ac:3d:9e:76:ba:cd:30:da:f9:
         3a:4c:26:5b:ae:06:89:f2:34:ff:d2:d4:dd:a2:83:c3:06:2a:
         98:04:f7:c8:d3:5f:dd:90:59:78:63:45:88:81:ba:2d:99:a6:
         be:59:42:68:7e:d6:52:0c:c6:b7:88:48:f4:ff:50:39:5a:4f:
         96:ab:98:50:7b:1b:4c:13:27:9d:f2:2a:b8:38:cd:4c:fd:e1:
         19:fc:bd:e8:c1:0e:b7:40:cd:63:91:8d:15:52:3a:5d:87:26:
         2f:5b:a6:4d:0a:b1:ad:9f:7b:91:16:1f:88:fe:bc:9c:1d:ac:
         11:71:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:54 2025 by rpki-client