Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa
File:                     3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa (raw, json)
Hash identifier:          aYjDHzlQXySXYktNwQW9cRUuW8O47J/4soSj/RsPpC8=
Subject key identifier:   61:56:AE:E1:C0:01:FA:F0:10:EF:7D:39:7D:78:72:BC:50:E0:A2:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C3880DF607BBAAE67F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     11910
IP address blocks:        184.104.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c3:88:0d:f6:07:bb:aa:e6:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=9d5d9341-7d8b-4fe5-a425-2af9e775f89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:80:56:22:09:13:5c:84:74:47:d1:8e:bf:
                    a7:93:aa:d0:79:d9:37:78:69:98:eb:88:9d:57:52:
                    38:08:94:b4:15:b2:b8:d0:0f:a3:ec:4b:7c:f8:13:
                    b0:57:e9:0b:2e:46:7e:c9:ae:77:27:d2:1b:42:9c:
                    02:30:af:25:2c:3c:7b:04:25:1a:7c:81:48:2c:4c:
                    3d:4f:35:de:a4:e9:21:cf:b5:48:a4:05:b1:c3:4d:
                    07:f1:01:e2:33:7b:ec:ef:b4:aa:c7:09:cc:b6:8b:
                    cd:46:f0:53:83:31:b2:1e:83:1c:84:bd:e2:26:5d:
                    02:79:45:33:0b:8a:8c:57:66:8c:45:23:ae:55:2a:
                    93:51:f5:80:5d:13:e1:39:c1:d2:77:9b:35:6f:08:
                    c9:e4:65:cf:f1:b7:d7:a5:1f:23:1f:d3:e8:4a:19:
                    05:fc:fe:2e:d2:c1:60:ad:44:08:e4:20:04:94:89:
                    12:c5:93:0a:60:e6:6b:8a:7e:fc:7e:84:5a:8c:ee:
                    eb:a1:da:a2:89:98:d6:1c:a8:cd:6b:6c:00:00:d9:
                    3e:9d:35:3f:8a:6e:73:68:fd:64:df:9e:73:5f:67:
                    7f:9a:61:4e:e0:1b:9b:24:1d:60:da:4c:15:72:1a:
                    80:74:cc:9c:dd:b4:49:35:2c:88:71:41:a3:f5:ce:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:AE:E1:C0:01:FA:F0:10:EF:7D:39:7D:78:72:BC:50:E0:A2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:a6:58:26:4c:c5:d1:0d:7e:60:4d:e0:f9:fb:e3:3e:72:
         11:d3:ac:ed:92:92:b1:b3:ee:51:b7:0f:14:f5:1b:1c:da:b0:
         60:b5:02:0e:cd:83:56:f6:68:27:e3:0a:db:2b:96:cb:ab:87:
         a0:5f:80:9c:e2:a1:2a:72:d1:ea:a2:23:27:44:c6:00:08:3d:
         3b:dc:68:df:89:62:10:ba:a5:f1:1f:c1:73:3f:ab:e7:bc:67:
         88:cc:92:3d:e6:bc:df:53:2c:32:27:a6:97:32:40:a8:c9:41:
         48:e3:83:63:07:e9:96:a1:ab:4d:70:8c:69:46:76:f3:e1:70:
         49:31:cb:14:f0:9f:6e:64:29:97:e7:e2:fd:e3:cd:59:d1:74:
         ee:57:ec:08:9b:ae:8a:71:b7:8c:ed:20:c9:7c:e6:36:b5:c8:
         e3:33:c5:dc:f6:19:c5:f0:ed:ac:24:0f:19:98:ad:43:cb:a3:
         68:40:a0:04:53:96:34:db:05:1d:2d:dc:0c:c2:5e:55:25:6e:
         b1:5d:2b:07:51:bb:25:e0:4e:cd:1d:34:2d:55:da:fd:89:99:
         3f:dc:1c:fa:26:28:16:ef:c6:7f:64:21:5d:c9:2f:f6:a4:66:
         3c:b8:49:89:c8:7e:38:f8:ea:c7:df:ac:6f:f7:ff:29:69:04:
         44:45:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:30:20 2025 by rpki-client