Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81cad9cf-953b-384c-a354-6321d6554df6.roa
File:                     81cad9cf-953b-384c-a354-6321d6554df6.roa (raw, json)
Hash identifier:          oIYyMPNK20j04jlAtBP+U/OXnFOV0pwQg4f0ilkGoZY=
Subject key identifier:   0D:10:F5:90:A5:2F:EC:9B:5A:35:D3:E4:F3:44:EA:60:35:D6:A5:0B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7F1033B6E68F21F85F180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81cad9cf-953b-384c-a354-6321d6554df6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397232
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:f1:03:3b:6e:68:f2:1f:85:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=c13078b8-7036-4855-bea9-a21a02ae09d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:29:ff:34:b4:7f:88:e5:f4:1a:0d:ff:52:
                    e6:e8:f3:62:68:1e:f6:39:f3:46:f4:0b:4a:40:c6:
                    db:c2:02:7f:e6:9f:6a:b8:f5:e3:e1:ee:af:48:3c:
                    33:55:40:e6:33:27:bf:6b:a8:2b:14:a5:28:d4:2f:
                    ac:20:78:35:e2:c9:3c:f2:83:35:38:77:89:e8:85:
                    82:33:a1:12:d2:b6:ad:4d:b2:a1:be:e0:cf:e3:c1:
                    92:ba:d3:ee:5e:0e:77:9a:e0:d8:ce:44:36:75:30:
                    f5:13:92:11:da:ac:e5:5f:05:bd:ef:29:10:6a:b7:
                    1e:cb:6a:3d:12:65:ce:8b:10:0a:6d:e5:2a:a7:b4:
                    46:ab:8a:c5:6b:50:45:e0:54:7f:12:9b:84:ad:ac:
                    39:70:19:d6:e0:4f:95:68:6a:97:ec:fa:b3:e9:f1:
                    c6:d2:1c:78:ef:a9:1b:57:fc:5c:0d:3e:8e:51:bf:
                    fb:7d:cd:1d:fc:cd:3c:3b:b6:8e:bf:a2:f6:15:f6:
                    da:20:b6:7b:5b:2f:58:f6:38:0b:4b:a3:ac:fb:17:
                    20:e4:8e:bf:96:27:b3:30:be:c9:65:be:5d:26:a9:
                    14:05:9f:2e:37:87:8e:9e:8b:d5:b5:68:fa:2e:bf:
                    f8:46:c0:32:6d:da:20:6c:70:c9:a7:54:db:f8:85:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:F5:90:A5:2F:EC:9B:5A:35:D3:E4:F3:44:EA:60:35:D6:A5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81cad9cf-953b-384c-a354-6321d6554df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:58:f0:e0:c2:d5:ed:9c:13:81:2b:1e:f1:e3:2c:73:29:
         7b:91:7c:e9:be:d7:9e:11:f5:33:17:69:5b:a9:4f:c4:d4:de:
         9c:e3:21:ee:76:15:df:b0:8b:27:bc:6b:48:9c:38:4b:7d:1e:
         2a:14:94:99:2e:08:78:81:75:94:58:6f:c9:7f:99:7a:02:c6:
         df:4b:e2:58:d0:3e:0d:91:8d:0d:24:8f:15:3d:56:7e:08:57:
         a8:47:80:75:26:ca:6e:de:57:02:d0:b9:72:9e:20:8d:24:48:
         3c:90:1d:2e:d8:b8:dd:51:24:2d:ef:19:37:10:a3:f0:99:d9:
         c3:fc:76:f9:a5:12:df:b0:25:65:c6:59:b4:92:f1:a0:5e:63:
         ad:92:b2:40:4a:9f:44:37:4b:91:f7:7a:d7:39:ef:62:d2:a0:
         8c:85:7d:c8:7e:7a:2b:f0:ea:41:81:99:fb:4e:76:cb:b7:9a:
         11:54:81:3c:b0:c4:f1:b5:64:d1:a1:62:d4:1d:f0:7d:69:45:
         8c:8d:6d:91:98:38:60:07:2d:86:6e:81:bf:bf:10:83:25:ad:
         45:1a:87:2e:49:eb:5b:ad:23:58:5f:30:05:2e:eb:c0:cd:5e:
         12:50:af:ee:10:6b:5b:32:df:8d:d1:60:c2:d5:9c:2d:ac:4b:
         df:bc:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:35 2025 by rpki-client