Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/347f182a-6e97-396f-b5e8-b713aca8cb1a.roa
File:                     347f182a-6e97-396f-b5e8-b713aca8cb1a.roa (raw, json)
Hash identifier:          Kw6mnEHTk6HI8OfEzYbOcOFYbw0XqRGtFH0AZSXfHkQ=
Subject key identifier:   EB:AE:DF:7E:4B:D6:5F:AB:96:FE:14:4E:D5:3A:EF:7B:6D:42:8F:E3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B9E1CE219C54BD5945FE89B20
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/347f182a-6e97-396f-b5e8-b713aca8cb1a.roa
Signing time:             Thu 23 Oct 2025 13:43:37 +0000
ROA not before:           Thu 23 Oct 2025 13:43:37 +0000
ROA not after:            Wed 21 Jan 2026 14:43:37 +0000
asID:                     212429
IP address blocks:        154.59.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:1c:e2:19:c5:4b:d5:94:5f:e8:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 23 13:43:37 2025 GMT
            Not After : Jan 21 14:43:37 2026 GMT
        Subject: CN=e9d1a45c-8e1a-4ef1-a832-e46210ca8b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:cf:70:8d:8d:5a:c2:97:1d:42:b8:b3:55:
                    fd:66:90:f2:f5:58:6b:53:03:fe:c1:9f:79:5a:b3:
                    bb:91:bc:ba:5e:b5:d5:29:67:63:92:7e:93:93:d6:
                    1a:91:fe:f0:82:27:9c:08:cc:cc:7e:41:45:81:b6:
                    9a:20:20:65:01:d1:30:be:36:2c:5b:39:61:88:bb:
                    c0:e6:cd:65:73:65:e4:3e:a7:66:9f:60:8e:fd:ba:
                    18:aa:78:5c:74:f8:a5:dc:f4:ed:d7:1c:c0:2f:26:
                    d1:77:dc:c2:bc:dc:da:6d:6b:94:5c:99:7d:3b:83:
                    d2:4d:ea:7a:78:47:1f:b1:e3:91:a5:8c:9f:9c:90:
                    84:45:20:9a:82:d7:c4:aa:2e:0e:e3:35:1b:9f:ee:
                    32:b0:1a:ca:bf:7a:3c:e6:5f:69:36:de:ee:6b:ea:
                    b8:bd:46:a3:bc:48:ce:71:f7:5b:b5:a0:db:26:bb:
                    97:04:a3:17:5d:71:1a:28:bc:74:89:7d:87:b5:29:
                    b1:14:d0:1f:e4:36:66:12:d3:99:11:c9:6e:8a:62:
                    ed:12:86:1d:b5:46:2b:9e:9f:26:7c:0e:13:e3:99:
                    59:3a:8d:fb:ac:6c:61:f9:1e:a2:99:26:04:5a:10:
                    ab:13:17:6b:b0:aa:78:e2:d8:5b:d9:53:9c:81:fe:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:DF:7E:4B:D6:5F:AB:96:FE:14:4E:D5:3A:EF:7B:6D:42:8F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/347f182a-6e97-396f-b5e8-b713aca8cb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.59.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:de:7b:96:12:d5:1a:4e:42:6e:ce:21:56:22:b7:fc:9b:
         39:75:3f:8f:8f:4d:90:e5:b1:fe:97:5c:09:46:60:aa:5f:31:
         92:95:40:51:a3:23:65:2a:b5:bb:77:ad:54:71:0d:c4:7c:a7:
         09:b7:a1:bc:66:1e:15:d6:bb:b6:f9:58:f2:05:86:78:d7:8d:
         87:dd:1c:40:c8:96:b1:39:85:20:f0:73:9d:4b:b8:5d:1d:f6:
         c1:95:b7:dc:ee:12:c8:44:3f:69:50:b8:3d:1a:b5:5d:85:f5:
         af:63:81:b2:2b:b7:a7:2e:57:78:4d:0e:46:6c:a8:80:f3:c8:
         3c:45:5c:ae:59:83:cc:fd:07:54:f5:ff:1d:96:97:e9:90:36:
         38:6a:9f:83:7a:3e:73:30:00:9e:f7:ba:56:63:ea:55:83:0b:
         29:16:c5:59:c8:a1:ae:ff:ad:50:82:01:b3:68:59:f2:cc:be:
         d3:e6:ac:0f:1c:b3:0b:e8:9e:4d:a1:57:e8:59:97:85:4e:0c:
         e7:4d:f4:c9:7c:9c:62:2c:0e:07:25:bd:f7:56:ec:16:26:78:
         08:4c:59:63:dc:fd:82:83:40:3e:6e:d2:9b:9b:c2:48:c8:a3:
         d8:63:a1:a9:4f:c2:d7:70:39:7f:41:b7:b1:93:5e:4b:79:bd:
         05:42:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:07:01 2025 by rpki-client