Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa
File:                     25e244e3-f519-394a-951d-cdac4dc84db7.roa (raw, json)
Hash identifier:          9a2RpYWQZZTCgZJiUICeE+xW0W3lOfsh5GIZdYs240I=
Subject key identifier:   03:E0:05:09:83:40:88:76:F1:49:11:CE:F2:2F:BB:E1:47:49:BB:80
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584BBFA5A57A76F67F5BB7BC5900
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     8014
IP address blocks:        108.60.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a5:7a:76:f6:7f:5b:b7:bc:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=6c151677-98bf-4ca1-bd16-aedbba062fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:e9:5c:8b:30:32:0e:81:4c:b6:14:b6:5e:
                    0f:c5:df:d4:51:7c:f0:c3:ea:fe:a9:53:90:38:71:
                    82:7f:4d:e6:bd:1a:b7:68:ae:43:4c:a7:e4:9a:34:
                    6b:f4:f2:5e:4a:35:6f:e2:9a:c6:e6:8c:1d:c2:2c:
                    6b:ee:b9:50:51:3e:33:96:77:99:ac:bf:62:6b:11:
                    2c:2d:3f:a4:64:56:62:39:af:16:93:03:73:35:39:
                    cd:00:f0:50:71:83:ea:81:17:c6:00:87:e0:75:81:
                    f2:c3:e3:2f:2b:4c:6a:e2:d2:65:c5:62:15:72:e9:
                    b8:98:4a:86:0a:00:ed:53:b9:60:45:48:64:28:4e:
                    4d:b1:24:62:5f:b2:ef:e3:11:f5:af:1f:0f:50:22:
                    ff:e2:e9:4b:6c:ec:a2:37:1c:10:ad:42:aa:f9:91:
                    03:a5:61:f1:73:eb:18:68:1d:f0:c2:5b:45:62:d8:
                    97:85:35:c1:08:82:7c:c8:fc:f3:e1:8c:8b:07:3e:
                    6a:25:9a:0b:ac:65:1a:c0:e8:60:0d:d3:94:9f:59:
                    82:8b:99:33:bf:59:d2:89:d2:7f:7a:7a:94:71:09:
                    35:62:2e:bd:c2:29:98:c7:16:03:04:a7:49:63:2b:
                    cb:31:a5:b8:47:25:c3:0a:1e:7b:34:46:7d:32:30:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:05:09:83:40:88:76:F1:49:11:CE:F2:2F:BB:E1:47:49:BB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:5b:33:ea:8c:34:2a:fb:65:84:d9:24:5a:ce:30:f5:2e:
         fe:9b:27:a7:de:d1:d7:fc:a6:30:88:57:fe:5d:67:33:16:ac:
         75:64:9b:0c:14:c4:27:7a:26:53:9a:84:15:24:3b:d2:d2:3f:
         f7:1f:1f:c8:1d:3d:ea:43:43:a3:76:22:4f:32:f2:33:ef:1e:
         b1:cc:8c:c6:12:5b:ba:dd:8c:66:70:fb:bf:58:91:ca:7c:44:
         d4:63:3c:37:d1:8a:8b:f2:38:be:f3:57:b1:ca:78:14:11:26:
         62:61:da:86:d1:d7:33:f7:5b:6d:7b:e9:93:a4:d5:54:93:59:
         4a:a8:a7:bd:bd:cd:2e:cf:0e:ff:0d:f4:39:aa:87:82:ef:57:
         19:64:4e:32:4a:34:9e:3f:f2:ba:bf:5e:db:8a:45:f5:4c:6d:
         f8:b9:b0:34:a1:d1:73:6f:6d:8a:f1:62:ef:7d:2a:fe:8b:59:
         48:50:15:c4:a3:f7:79:36:c0:fc:a1:e7:98:68:b9:86:57:01:
         e2:7a:e1:e7:ff:81:fa:94:11:95:bc:85:8f:f7:63:5c:b9:14:
         86:3d:1f:d0:72:ff:9b:a5:43:1a:e4:0e:09:25:b6:6b:26:af:
         12:22:5e:d3:03:bf:02:d4:61:45:f2:e5:a4:87:1c:bd:c9:f0:
         59:9d:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:12:10 2025 by rpki-client