Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46da644c-6af7-38b2-a524-182ac418d117.roa
File:                     46da644c-6af7-38b2-a524-182ac418d117.roa (raw, json)
Hash identifier:          CvRZYlcAMEHTBk3px4obU/r+G738ingM8GlOAw9R13Q=
Subject key identifier:   1E:0C:43:7D:17:3D:43:1E:AA:89:29:E4:51:E2:E8:78:4B:AB:E0:6D
Certificate issuer:       /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial:       010D0C9F4328584BBB7590F790D208A37E8512C0
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46da644c-6af7-38b2-a524-182ac418d117.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     16713
IP address blocks:        208.70.145.0/24 maxlen: 24
                          208.70.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:90:f7:90:d2:08:a3:7e:85:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=6fbe6923-d5ec-4b18-ad59-952341d5c201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:7f:06:9f:7b:c9:7f:fd:7d:c2:14:96:9b:
                    f4:e5:7f:c9:a8:25:03:5e:c7:23:4f:39:ba:96:9f:
                    3e:86:93:84:eb:95:70:bd:af:a1:02:87:df:d6:cb:
                    c5:ea:28:b2:da:88:3d:61:80:84:04:b8:71:44:04:
                    4c:72:d3:52:97:68:6c:9f:b8:4d:39:38:ef:d2:fd:
                    44:b7:a6:e1:78:7f:ed:d5:ff:ee:89:81:29:ba:ae:
                    9b:a8:8d:cf:e2:f2:07:2e:fc:91:e2:40:15:be:db:
                    c1:31:36:59:12:9f:41:a1:b0:e4:30:15:aa:23:7a:
                    71:a8:b8:32:33:42:10:7d:65:fa:ad:ef:d8:69:26:
                    6d:b6:be:1d:6b:dd:56:3a:e7:90:a2:11:a2:0f:a3:
                    de:d3:61:7c:e9:82:f4:37:e3:4a:96:5c:ed:c6:78:
                    9f:3b:1b:b7:05:ea:ff:dc:eb:8c:d2:dc:ab:4f:41:
                    71:be:3a:d6:94:a2:5a:c9:d0:d9:93:d4:d0:9f:d1:
                    ca:b5:5d:22:63:d6:4e:e0:76:82:12:b1:95:9c:bb:
                    17:15:55:74:7a:5f:d0:b1:32:37:7e:e1:ac:7c:1a:
                    b3:9c:2b:21:69:66:11:40:f0:4f:21:e3:b2:39:aa:
                    75:0d:fe:d1:6d:2b:36:81:26:d0:0d:1d:77:cb:45:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0C:43:7D:17:3D:43:1E:AA:89:29:E4:51:E2:E8:78:4B:AB:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46da644c-6af7-38b2-a524-182ac418d117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.145.0/24
                  208.70.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:91:ac:7e:0e:05:26:95:82:bb:02:2e:a5:ec:91:b8:ff:f5:
         cc:6f:3b:2c:9c:1d:93:3e:0b:81:29:67:86:16:2c:c3:a4:01:
         37:3a:c3:37:5b:12:01:97:5c:b6:a5:80:19:c9:97:f4:86:9b:
         52:05:b6:46:95:21:f8:e1:e6:71:15:aa:a1:5c:f2:bc:c3:65:
         3f:12:65:08:5c:94:bf:a1:d9:6b:6c:36:f8:d8:1f:84:ca:a1:
         26:51:f9:a6:16:6a:27:5b:f6:cf:4b:34:86:d1:9a:e5:28:dd:
         c2:d5:dd:d3:55:d1:01:d9:60:6f:69:dc:68:fb:33:5e:28:12:
         b8:ef:05:d5:96:0a:90:4a:5e:85:73:50:e1:73:da:73:d1:ff:
         c9:61:a6:c3:ae:43:4b:58:35:f5:18:00:29:6e:5d:44:a8:4a:
         22:88:c9:aa:55:49:af:d9:cd:a0:f7:79:be:bb:59:6f:1f:ce:
         36:b2:ee:51:bd:a2:8f:fd:d4:1f:96:4a:dc:8a:20:73:1f:96:
         62:e4:d6:cb:cc:ad:ef:2c:32:25:0a:d7:82:39:3a:cf:07:95:
         c2:26:2d:7d:8b:c1:b9:77:1d:04:55:ca:cc:f7:1d:58:35:89:
         6d:49:3e:30:a8:86:93:07:39:8f:b9:60:ed:ef:7a:30:e2:36:
         40:01:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:36:41 2025 by rpki-client