Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa
File:                     30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa (raw, json)
Hash identifier:          62y6XJYDRE6eGYkcfrlEX3l4bc5PCuJbAcVndlnoT/s=
Subject key identifier:   13:80:49:A6:88:63:2C:4E:A0:AC:AB:CC:CC:12:F3:1A:DB:32:3E:C0
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584B9E07CF2477C40066A364B340
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     19905
IP address blocks:        208.80.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:cf:24:77:c4:00:66:a3:64:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=42e2ec95-925c-4e9e-b4a7-b796d3ec5a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:dd:0a:e1:77:b9:71:53:f8:bd:44:5d:1c:
                    ee:7b:fb:8c:3e:6f:4f:0d:6a:f6:29:af:a4:78:94:
                    81:cf:93:b5:cf:c2:a3:e6:4b:a2:6f:bf:f0:ea:89:
                    a2:17:45:c8:c1:65:30:cc:ec:4a:73:34:41:0e:e4:
                    77:d0:85:e3:9e:2b:33:04:7f:05:4b:34:db:e2:3f:
                    c6:11:b7:1a:c5:fe:7a:b8:44:f4:50:4d:7a:47:8a:
                    c6:b9:6d:98:57:e9:bc:85:35:e6:ef:c1:a9:46:c1:
                    5f:51:70:bd:9c:45:d8:f2:dc:98:93:52:68:ab:f3:
                    0a:b7:89:61:bb:54:ca:90:df:9b:f3:7d:7d:e0:3a:
                    5d:45:82:7d:bc:56:22:31:00:56:d3:2b:42:4a:5d:
                    9f:25:22:e8:19:1a:3a:41:8b:b9:1e:5e:18:75:6a:
                    b2:ce:12:ef:c6:0c:d1:8c:ff:e1:86:12:54:dc:31:
                    1a:75:98:19:75:0a:9d:d6:f5:f5:c1:d2:55:81:cb:
                    02:e0:43:04:99:e0:5c:1c:c9:d2:70:07:86:2b:42:
                    c4:2d:af:15:73:0c:bb:6b:4f:1a:27:54:bd:4d:29:
                    d5:15:b9:0e:b7:b9:d2:8e:7f:33:4d:56:b3:f0:f3:
                    92:2f:5e:13:0f:a6:84:39:6e:9d:50:95:b0:ad:c6:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:49:A6:88:63:2C:4E:A0:AC:AB:CC:CC:12:F3:1A:DB:32:3E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:9b:bb:d7:2b:7f:65:11:34:17:35:cd:21:49:01:3f:dd:
         9e:27:60:08:ef:d6:db:b7:2e:df:ae:6c:a6:2d:5a:e6:3e:a9:
         d2:9c:e1:7b:7b:8c:b3:d6:c2:0b:c8:f0:5c:35:92:24:34:9d:
         1a:25:99:30:d9:60:72:d2:9b:19:29:72:8d:38:ab:d7:4d:64:
         7a:b4:37:39:ab:b2:b0:a5:94:5b:a1:a5:b8:f1:94:5f:62:6b:
         68:66:e8:47:3a:3b:cd:4a:9a:50:24:1e:1d:b5:e8:0e:50:76:
         26:9b:8b:fb:15:61:de:27:f2:fe:9f:9f:c3:9c:f5:0c:6b:60:
         05:6c:22:6b:c7:0b:a6:3f:b2:a5:89:b5:6a:a9:81:99:06:4d:
         15:1d:d0:53:3a:a1:f5:7f:df:75:be:99:68:6e:39:a6:46:a9:
         99:cd:d6:ee:14:ce:98:64:7f:73:b6:14:68:a7:18:a1:d6:f0:
         d4:43:6e:c5:7f:65:74:82:96:a2:e3:e9:f5:6d:f6:b4:26:1e:
         93:e7:39:cb:f3:6e:9f:6f:6c:c7:2f:8b:8d:6d:19:90:df:b3:
         b5:c3:45:d7:15:66:3d:d8:b4:a6:39:43:9a:b5:a1:0b:e9:0c:
         b9:01:3b:54:86:47:dd:b8:3a:27:d5:38:b3:1d:ee:95:26:ff:
         75:bc:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:57:09 2025 by rpki-client