Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b7295-a49d-3d1e-8092-b8f89b34a3e7.roa
File:                     307b7295-a49d-3d1e-8092-b8f89b34a3e7.roa (raw, json)
Hash identifier:          1YcEnm2AvNRh1YMDC4qoitPQuLrFcmHRdD20aCfNJeQ=
Subject key identifier:   77:BD:0D:10:71:51:94:DB:C7:2D:89:E5:D8:07:8F:44:3E:83:53:86
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584BBB758D01539C3E6C7F73AF80
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b7295-a49d-3d1e-8092-b8f89b34a3e7.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     40317
IP address blocks:        137.118.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8d:01:53:9c:3e:6c:7f:73:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=c553f455-bc1d-4714-bc62-620592f5ff7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:e9:fa:09:94:b3:e9:93:16:e7:0e:a0:af:
                    8e:ce:50:28:6d:7b:97:7b:15:76:f8:75:6d:3e:67:
                    f9:8a:e8:85:ff:44:12:77:4d:c4:43:98:45:0b:2c:
                    0e:25:38:00:25:a0:dd:6e:d8:c5:82:9c:5a:ca:c1:
                    3a:7b:b0:78:5e:8a:63:fb:9f:43:9f:33:64:18:35:
                    ed:47:2f:d6:d9:9c:3e:bb:76:17:91:21:10:ae:83:
                    4c:c7:69:b7:5d:09:ee:33:bc:78:5a:45:ac:fe:9c:
                    8b:c2:a9:fb:dd:44:71:e2:cc:4b:30:64:94:7a:cf:
                    91:7e:79:a7:c9:d3:61:5b:1c:e2:ad:1f:50:9a:a0:
                    11:da:d8:42:14:da:96:5a:7f:3a:32:54:86:ff:c5:
                    75:6c:d5:50:20:aa:9e:5f:72:d2:aa:ea:f2:e8:4e:
                    fc:da:08:1a:46:23:c4:00:5e:22:52:5e:c7:da:51:
                    84:bd:64:54:66:b5:68:33:de:7c:48:bc:a5:39:c9:
                    fd:8f:fc:14:89:ec:56:aa:1f:53:fd:c7:18:d8:66:
                    f3:ae:fd:98:6c:be:ac:3f:ca:23:44:20:8e:10:47:
                    56:5b:2a:69:9a:87:d2:f8:1c:e6:bc:dd:b7:18:ce:
                    a4:ab:c4:6d:16:71:f5:fb:e4:82:a2:e3:e7:4b:e2:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:0D:10:71:51:94:DB:C7:2D:89:E5:D8:07:8F:44:3E:83:53:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b7295-a49d-3d1e-8092-b8f89b34a3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:26:c6:4c:7c:ff:67:85:7d:e3:9b:7f:85:b8:29:12:7f:3b:
         63:5c:2e:b1:eb:68:4c:e8:c9:d3:bd:3e:95:4b:e1:8f:68:88:
         a3:dc:22:46:3f:9b:a2:87:62:6a:21:94:2e:ce:38:22:46:0a:
         12:4f:66:db:7b:82:4d:b3:b7:49:78:6c:3c:3a:5f:a0:54:49:
         bc:ae:86:c0:35:17:67:f8:82:4e:64:0d:d4:8f:6d:32:dc:3e:
         93:d5:65:3e:e8:55:a2:09:fa:34:33:73:ee:3b:32:c9:eb:40:
         8c:a3:9e:82:c7:6c:37:ea:fc:18:05:f8:d9:de:54:39:f4:ec:
         36:9a:0c:9b:56:7a:85:7d:6f:38:a8:99:88:99:7e:93:5a:9a:
         b2:85:63:a4:4a:3d:eb:2c:bb:dd:62:16:03:97:9b:93:ba:68:
         ad:91:3d:73:1b:96:ad:cf:58:3e:d3:19:88:6d:7d:7d:3e:05:
         e2:c7:07:e4:24:f5:bd:03:0c:29:53:ca:32:b1:18:90:79:f5:
         65:23:08:b8:40:e7:ca:ba:a8:f1:34:35:0a:3a:25:77:09:d6:
         42:ad:c6:5e:c0:29:44:4d:d3:f0:c7:48:bc:fb:1f:d7:81:9f:
         3b:d3:0b:93:22:90:03:09:54:27:1b:76:12:30:25:bd:49:bf:
         da:41:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:05:40 2025 by rpki-client