Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/cea93ae6-ce31-3d6c-9d1a-ce885a32a4e5.roa
File:                     cea93ae6-ce31-3d6c-9d1a-ce885a32a4e5.roa (raw, json)
Hash identifier:          mJKvxyO3Pq5F0ddNghf4QNgUpXm9FHF7WlEA+a9BRyw=
Subject key identifier:   9C:46:0B:5E:F2:17:37:15:13:8A:0A:05:D8:CA:CF:16:30:9B:4F:71
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584BAEC7B183ACD96A58C9172CE0
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/cea93ae6-ce31-3d6c-9d1a-ce885a32a4e5.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     16713
IP address blocks:        107.191.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b1:83:ac:d9:6a:58:c9:17:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=3f39eb30-6ac0-4116-b3ae-281f0ce5c924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:aa:48:ef:c6:66:56:88:f7:7f:20:6d:32:
                    fe:4b:0c:de:a2:b8:be:7a:92:96:7a:11:2f:53:b0:
                    bd:1b:9a:2a:1f:4c:71:ad:04:26:24:d9:cf:11:22:
                    03:ea:b6:78:31:35:0e:71:36:64:c1:03:22:79:2e:
                    91:2a:56:5a:60:f3:b6:45:5e:f6:d6:99:b9:d5:77:
                    e3:8d:e7:f0:5e:a6:54:f6:e6:5e:55:39:f3:48:00:
                    46:58:94:99:12:82:63:81:eb:d9:ef:32:9e:f5:11:
                    d1:f2:5e:67:eb:41:9d:5c:4b:a4:8f:99:b1:fa:da:
                    54:fa:80:ab:55:4a:27:a1:59:3e:a9:49:17:94:e3:
                    70:9d:89:24:12:eb:20:fd:ec:b1:38:9f:6a:81:24:
                    bd:ee:f3:db:41:f2:8c:35:64:07:32:bd:17:a8:23:
                    32:21:41:78:43:da:9e:d1:d1:6a:66:8d:6f:85:88:
                    f1:15:0e:97:4f:06:aa:a1:1d:5f:a4:32:57:62:6b:
                    bc:ba:81:64:09:98:9b:e3:8b:df:6a:f7:f5:02:35:
                    60:48:58:b8:0a:58:96:a0:94:fe:34:d2:fb:05:7a:
                    05:7b:24:3e:e2:17:d7:93:63:8e:7f:ab:83:14:62:
                    31:ca:05:bd:48:e6:82:ca:3e:a3:a9:37:83:e9:02:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:0B:5E:F2:17:37:15:13:8A:0A:05:D8:CA:CF:16:30:9B:4F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/cea93ae6-ce31-3d6c-9d1a-ce885a32a4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f7:c1:a0:ec:5a:47:09:99:ca:79:20:19:ee:92:d3:2b:6c:
         9a:9c:c9:fa:f9:f1:0e:d9:f7:ba:ce:52:ec:2d:fb:64:a0:57:
         78:0c:dc:a0:58:27:04:4e:26:ee:c5:ff:22:aa:18:38:05:54:
         10:9e:60:12:b0:25:5e:89:94:c8:dc:8b:f2:9a:3b:ff:47:e9:
         65:bc:a8:78:01:84:ee:3d:0c:72:22:1a:6d:95:60:e8:12:e6:
         62:3d:d7:89:48:7d:ec:e8:52:1a:3f:41:ac:8e:c5:e7:87:5c:
         67:7e:4f:a7:39:33:a4:4c:85:fa:76:1b:9f:25:51:ed:82:3f:
         eb:e2:00:95:75:04:14:d1:de:7c:35:76:26:5f:8c:3e:a4:8d:
         ec:c5:e8:f3:48:ac:48:81:3b:50:af:12:80:a8:a2:53:32:23:
         b7:7b:38:1a:00:37:ad:72:3c:d6:92:a0:8b:30:b5:c6:c8:13:
         cb:c8:f6:cd:cd:23:e4:7e:3c:b3:91:c7:44:77:c9:d5:22:00:
         fd:aa:a7:fd:05:7b:7a:d4:db:2b:f5:57:a4:b0:fc:1f:06:2b:
         39:92:0e:62:51:b0:8b:0d:23:e4:08:e3:48:e1:39:83:88:ee:
         ee:b4:2a:6a:a0:22:25:f1:76:d4:df:4f:fb:94:9b:40:2a:bf:
         a9:89:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:33:20 2025 by rpki-client