Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa
File:                     99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa (raw, json)
Hash identifier:          90BwpfpWskjkZex/laGcQQsUlmIIcpLUVCqSzcdgT9E=
Subject key identifier:   E0:A7:55:EA:E3:91:CE:81:E0:AA:D7:CC:7F:7E:B9:62:7E:0A:E5:F8
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584B970D06716E115B19E45B2840
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     91
IP address blocks:        204.145.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:06:71:6e:11:5b:19:e4:5b:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=4d801d9b-1480-495b-81ef-7f12ffeb9cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:74:ea:be:8b:95:1f:a5:22:28:a2:bd:4c:
                    ab:72:1c:b7:45:bd:e3:7d:a3:01:51:bf:52:30:1f:
                    b1:c9:52:64:9d:5f:54:fb:81:98:55:a5:84:96:1a:
                    25:6c:9e:93:f8:49:a0:0a:d6:fc:fd:4f:62:f5:38:
                    d8:97:c4:77:cf:09:22:a0:a1:0b:1c:c2:1a:cf:82:
                    7c:80:70:42:cd:85:78:79:ab:8a:37:bf:59:2c:7b:
                    ca:d3:2c:54:fa:1e:75:1f:3e:ab:12:30:1d:14:f9:
                    30:41:dd:79:f5:10:00:11:77:90:96:b5:d7:fc:3b:
                    0f:02:6c:a8:77:b4:a4:12:e2:9a:e6:3d:4e:c7:15:
                    67:12:62:ca:7e:8a:6a:0a:71:65:f2:17:a9:28:be:
                    b0:8d:2c:f2:21:eb:c3:41:8c:7b:36:15:51:ea:bd:
                    37:9d:8e:35:8d:79:5a:99:26:e6:48:0d:0b:8e:68:
                    be:7d:0d:1e:a2:72:71:f7:90:f0:52:d8:6e:8d:9f:
                    22:5a:90:4e:06:de:f2:7a:d7:87:32:37:85:e4:61:
                    46:32:63:5a:6b:1f:72:8c:3d:e7:15:d1:7c:a2:6b:
                    b0:23:2e:5a:ea:ea:72:93:95:d9:73:02:fe:56:95:
                    52:be:7f:08:0f:4c:9c:ac:83:70:4e:e2:c0:ea:05:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:55:EA:E3:91:CE:81:E0:AA:D7:CC:7F:7E:B9:62:7E:0A:E5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:ba:f6:e7:3a:f2:68:1e:e0:94:e5:40:b1:72:1d:40:a6:
         ab:d7:58:f8:95:a7:31:8d:b1:c4:36:e4:40:c4:b5:11:bd:e5:
         c6:2e:f6:df:b0:b0:60:bd:11:ac:a9:71:ba:a8:61:d8:0c:3d:
         fd:8b:ac:4f:21:74:ca:a1:61:89:54:75:a8:db:88:6a:e2:99:
         7b:45:b0:1c:67:df:bb:82:b6:5a:d3:83:e7:0b:10:ec:e9:59:
         b7:5d:8a:1a:02:e4:06:71:7e:fc:4e:a7:e3:2a:40:93:72:05:
         07:62:b8:ee:64:c5:73:1a:fb:45:3d:bc:94:a7:a8:97:ef:5b:
         9f:12:f4:51:f8:98:a8:5c:0d:d0:da:e1:66:37:b0:66:70:e5:
         f1:93:21:01:03:c4:77:8d:92:78:cd:dd:1e:53:bd:c0:c3:03:
         82:55:93:4c:dd:b6:99:fe:ba:a0:97:c3:45:79:bb:bd:45:39:
         d7:59:c1:41:85:a9:84:86:34:bf:59:31:db:78:70:47:d8:04:
         d7:bb:1f:10:6e:98:00:de:d4:fa:78:e1:84:04:86:69:40:10:
         ee:c7:a4:5d:9b:45:1b:c3:68:84:05:76:fd:db:f3:99:8e:c5:
         3e:1a:0d:57:4c:88:a1:47:09:cc:3e:cf:4d:7b:58:75:18:54:
         52:77:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:48:54 2025 by rpki-client