Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa
File:                     3c42f4d1-9c05-38d4-8804-432f88c01675.roa (raw, json)
Hash identifier:          M1qs9eA7hpk+ngZDdGpeA8NcXd5Sj8SAJtZmwOnpHB0=
Subject key identifier:   08:34:3B:91:7E:84:44:84:41:B9:0E:18:7B:80:9B:F4:DD:DC:CE:9A
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584B3C51ACC52E65D3881AED1EE0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     3738
IP address blocks:        192.250.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:ac:c5:2e:65:d3:88:1a:ed:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=424f1530-4abe-4234-84b0-c82e1a601521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:71:fc:e6:6b:7b:d0:b3:56:d9:59:6e:b5:
                    1a:e3:5f:b7:51:b1:79:8a:e3:a5:e2:48:76:3d:3c:
                    ac:20:c3:86:c3:17:9a:fe:a2:f3:73:1d:0d:36:bb:
                    ca:fa:3a:30:b7:83:8a:11:02:be:3e:77:a0:ad:78:
                    57:c9:4e:51:d2:64:8a:75:ab:d8:ce:4b:81:c8:e8:
                    9b:12:ec:c2:7a:a2:32:9f:b6:3b:f7:eb:f0:14:63:
                    9b:91:5b:1c:7f:c1:9a:8b:45:fa:fa:cc:13:04:74:
                    cd:da:2e:75:df:cd:9b:66:41:6c:fe:d7:f6:a6:03:
                    3f:6a:47:31:27:c6:ea:e1:e8:27:d0:11:6c:13:72:
                    6d:1d:d7:4c:72:4e:7a:6c:4e:31:65:47:44:e6:f0:
                    74:25:fc:44:68:aa:24:d5:4c:f2:b7:5c:fc:28:5b:
                    06:cd:d6:a4:0b:6e:ba:a2:92:04:44:f8:5a:11:af:
                    40:8c:fe:b7:0c:69:00:73:de:0c:f6:15:e2:07:d1:
                    79:be:54:41:a1:f6:54:f2:ae:77:06:74:aa:98:13:
                    39:2d:26:88:22:84:06:38:4a:f2:65:fb:fb:0e:af:
                    62:79:6e:43:cb:d8:0e:c4:5e:84:ed:47:7c:42:36:
                    f3:3c:b4:b0:c1:61:d3:09:b5:69:3a:78:8e:6a:a0:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:3B:91:7E:84:44:84:41:B9:0E:18:7B:80:9B:F4:DD:DC:CE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:97:ce:09:9b:d9:90:7d:d5:35:f0:e2:b6:ec:f6:d4:c3:9c:
         28:1b:c7:98:20:7a:70:01:14:c8:5a:89:6b:1a:71:df:2b:98:
         c1:54:be:63:39:10:96:7b:fe:2c:67:a8:de:44:66:fa:a8:e3:
         3d:46:0b:db:30:d9:69:bd:70:be:c7:10:9a:b2:92:78:54:d7:
         bc:1a:1e:ad:d5:70:e8:88:68:4c:1d:ff:4a:1d:ad:04:ac:e8:
         ee:5e:cc:06:4a:5b:8d:c9:36:de:35:f8:5b:6c:8a:04:ba:c7:
         14:57:30:29:c1:61:a2:a1:e9:27:fb:3b:1a:41:93:ff:4d:c1:
         03:e0:f7:b2:47:98:53:46:c5:e7:35:2e:92:d1:30:36:1b:14:
         21:9a:bf:2e:69:54:c4:05:2d:aa:7e:f9:e9:ab:75:a2:a2:dd:
         7f:c1:07:53:6b:a5:35:9b:5b:51:e2:20:54:f8:c2:46:c7:20:
         28:6a:55:6d:0f:fe:8c:aa:81:75:7e:58:30:ac:6e:02:8b:2d:
         e1:33:54:d7:d9:3b:2b:97:4e:ae:e1:2c:68:4e:fe:96:ac:cf:
         5d:dd:ff:38:62:1b:11:57:0f:85:bf:51:24:d8:de:ee:fe:98:
         55:45:b3:0c:b9:b0:15:bb:eb:d5:6a:e7:93:b4:59:32:f0:3a:
         7c:55:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:43 2025 by rpki-client