Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
File:                     868a1978-2e1f-3361-bbef-2069ed241746.roa (raw, json)
Hash identifier:          QvTlEoQdG+C4ARM/Qlfz1ZzDmVFi91uctIDJtTthDVU=
Subject key identifier:   00:53:AD:67:15:7D:47:13:41:1A:BA:36:C0:61:FB:25:CC:16:19:41
Certificate issuer:       /CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Certificate serial:       010D0C9F4328584B99D77C72CEC6A8E4B39A6640
Authority key identifier: 29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        104.207.170.0/24 maxlen: 24
                          104.207.171.0/24 maxlen: 24
                          104.207.172.0/24 maxlen: 24
                          104.207.173.0/24 maxlen: 24
                          104.207.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7c:72:ce:c6:a8:e4:b3:9a:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0f242a-aaee-4297-9937-b33329a8c34f
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=d1d18451-a31b-425b-a068-ab5282ef0af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:c3:34:bb:f3:dc:78:53:82:54:b8:d4:82:
                    31:c7:90:94:8e:01:4a:50:5d:06:1b:bc:52:28:38:
                    d3:d0:ec:b0:30:98:fe:09:bd:de:7c:32:a0:e2:ca:
                    8e:e7:0c:f4:5e:b8:fd:5c:2c:d5:5f:6b:ee:f0:15:
                    db:c0:f9:96:bf:0f:62:30:0e:2d:cb:60:11:40:2a:
                    a2:e6:23:dd:9b:c9:64:83:61:2e:69:fb:61:5f:a8:
                    3a:94:cd:13:4f:63:a9:7f:1a:f6:19:10:33:de:10:
                    20:11:cc:08:65:d6:f5:15:20:3b:0a:b2:78:f6:1e:
                    22:6e:61:61:9d:60:13:de:04:99:50:04:24:bb:fd:
                    a0:95:94:88:09:e6:18:1c:d4:31:b2:bc:2b:26:ac:
                    e7:20:52:92:d0:72:85:7f:55:88:0a:7b:31:1f:82:
                    c2:ec:c1:a6:d7:9a:45:d9:72:f1:1b:f0:0e:4c:40:
                    ab:20:5c:fa:f4:05:dd:19:c3:f6:22:28:c4:ae:38:
                    4f:ea:f3:cf:93:67:8b:7b:82:8d:43:89:62:d4:e8:
                    88:97:92:bc:42:ef:59:f1:17:20:31:58:d0:79:2e:
                    34:af:f1:3e:38:c2:f2:5d:39:bc:1f:9d:a1:64:78:
                    fa:f6:9f:61:62:10:8b:6d:0e:cf:8e:c2:8c:c3:d4:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:AD:67:15:7D:47:13:41:1A:BA:36:C0:61:FB:25:CC:16:19:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl

            X509v3 Authority Key Identifier:
                keyid:29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.207.170.0-104.207.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:d0:fd:f5:16:15:0b:a2:a4:bf:e8:59:df:6c:dd:91:5a:
         38:bc:bd:0f:d5:5a:d8:58:67:24:ff:38:79:d3:d2:10:65:c2:
         fb:6e:1e:cb:47:77:77:4f:1e:1a:ab:6a:a8:a6:69:b7:81:c1:
         3b:be:bb:e7:06:de:14:10:6a:aa:e5:e3:97:e1:92:ab:df:8f:
         0e:f3:df:bd:b3:34:58:74:4b:1e:8e:12:da:84:1a:ae:57:c0:
         78:c6:45:36:df:2f:75:07:08:1e:7a:a5:2e:2f:33:f5:65:31:
         18:0a:3e:7c:13:a2:d4:d2:81:38:7f:cb:c2:e1:08:83:66:7c:
         b7:8b:ad:3c:44:17:8c:c7:ad:06:fe:87:91:9a:c4:ce:09:28:
         ee:14:f9:a6:97:1f:f1:e5:2a:77:37:d9:b4:1d:91:80:ae:e8:
         d3:92:8c:19:7f:0f:1a:2b:43:4d:a0:25:34:cb:a4:c4:3f:4d:
         c7:6f:c3:e3:9a:d4:b8:66:a4:0a:53:d0:c7:09:17:fe:14:1d:
         5e:d8:a8:b8:f8:4e:47:77:ae:ac:b5:e1:2c:de:1b:a3:26:6f:
         11:c9:db:9e:f3:74:51:8f:8b:93:9c:dc:40:06:76:87:9e:1c:
         7c:38:f2:4c:04:5c:2c:08:0e:e0:35:3f:6f:43:5b:01:80:72:
         b7:14:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:51 2025 by rpki-client