Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
File:                     ce18774d-344f-36c4-9f23-6fece962f73e.roa (raw, json)
Hash identifier:          4vH6HrKylEKqyJl10M6wpCY0Qdw69ydUkCT/OTXfTg4=
Subject key identifier:   DC:59:9F:60:C3:86:74:98:D5:7B:45:70:34:16:11:95:8A:A1:6C:D6
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584B9E07C61F1CD80C0578AB91C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     2559
IP address blocks:        198.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c6:1f:1c:d8:0c:05:78:ab:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=d691f09c-b492-4fed-bded-1be960ba39e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:51:ad:c0:9e:f1:e7:28:03:a4:2b:e0:6d:
                    c8:fc:d3:10:5e:73:08:69:63:6b:23:7a:8e:21:49:
                    a2:ba:33:d0:e3:3f:7c:00:e2:f9:75:e2:52:02:06:
                    ce:4d:02:dd:cf:9e:12:8a:6a:fe:1f:07:77:7d:d2:
                    6d:a2:f4:d1:5e:a4:d2:3b:45:dc:c8:a4:03:77:59:
                    9d:fd:57:c0:61:41:ff:0a:d2:b0:2c:8d:0a:45:37:
                    fd:29:b6:b8:0a:65:2c:d9:75:39:37:5d:23:1e:5a:
                    17:d5:f8:81:48:ac:80:36:ec:5e:e2:30:51:2a:fe:
                    93:c2:8e:d6:90:11:df:0e:d7:fa:19:37:75:ec:6d:
                    cc:b1:b8:a6:d1:fe:11:94:fc:c3:8b:25:92:66:50:
                    34:e7:00:d9:6b:1c:a6:d6:83:c3:e3:08:02:5c:b1:
                    01:19:62:dd:06:55:f4:0b:3d:a6:84:05:1e:89:5b:
                    48:31:d2:7f:92:8a:7a:a2:40:ca:f4:76:b4:00:f9:
                    16:85:c0:0c:d3:f5:53:a6:3b:8b:99:f0:11:95:97:
                    e0:30:c0:5a:c8:57:ec:bd:83:fd:94:8c:a4:a4:fe:
                    1d:64:fc:36:5e:86:3e:31:e6:d0:b2:07:c4:a6:b5:
                    50:2f:d6:60:68:92:f2:32:ca:22:be:c6:9e:00:1e:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:9F:60:C3:86:74:98:D5:7B:45:70:34:16:11:95:8A:A1:6C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:74:99:74:d2:e8:62:79:bf:45:83:67:3f:f3:98:3c:5b:d3:
         6f:38:b9:a1:ff:0f:fd:09:db:4b:fd:17:8c:d3:6c:e8:cf:23:
         1c:9b:fc:45:3e:e7:cb:e1:07:c5:66:37:86:8b:49:7c:9f:8d:
         35:71:94:e3:83:d8:17:f6:7b:e8:aa:20:5e:d6:3c:08:be:d0:
         9c:c1:44:58:81:0a:e7:73:a3:53:c7:29:8c:ee:22:9e:e9:93:
         2f:02:ae:2d:51:e2:f8:ba:12:b0:01:fb:c3:b0:13:13:30:75:
         85:bb:96:72:fa:e9:5f:9b:c1:d6:88:c4:6f:07:ab:2d:48:f8:
         75:26:14:56:3a:2d:cc:d5:d9:59:65:4d:a3:80:41:fe:61:09:
         5d:5b:81:88:e6:e7:9f:d2:18:d8:b5:bc:2a:8e:f2:48:92:3c:
         64:53:da:c4:4b:67:49:f7:e2:7c:d3:87:46:41:cb:76:c3:52:
         4e:36:0e:b0:54:6c:d7:e3:4c:a3:e6:09:91:8f:77:02:34:79:
         13:78:3c:4a:5f:6c:0d:fe:76:3d:d5:27:f0:a5:73:57:53:0c:
         84:9b:32:38:d2:67:10:92:91:e9:76:69:33:11:c1:bc:63:30:
         70:46:43:0d:77:33:fb:a3:01:8c:fa:a2:0c:6b:ad:fa:12:0d:
         87:14:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:19 2025 by rpki-client