Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa
File:                     536bdaa0-0f1a-3e47-9251-28af7a104243.roa (raw, json)
Hash identifier:          dv4BWKnDcfBfvOC5flgDm6yGGorohE3MoNQKz8SJAsc=
Subject key identifier:   94:99:E8:E4:05:F9:64:13:CA:CC:EF:EB:03:10:31:85:E6:87:A6:CC
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584B8D477A8D6583C3D179451300
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     20365
IP address blocks:        199.7.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7a:8d:65:83:c3:d1:79:45:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=1d790278-91f5-4263-9c2f-65482d404ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:cf:b6:d4:64:8f:91:b4:78:c0:61:b7:cc:
                    82:32:cd:f9:22:94:da:63:d4:d9:4a:8a:38:7e:04:
                    eb:fd:c2:be:35:d4:12:dc:bd:82:c2:f7:76:87:fd:
                    c0:04:ae:67:86:25:1c:0e:98:51:28:4f:f1:81:4d:
                    96:ed:7f:ed:4f:a4:3a:17:1b:8c:ec:69:bf:58:17:
                    3a:9c:4e:c2:1f:5c:ca:37:3a:d9:bb:10:4b:76:c3:
                    91:d5:90:1e:30:2e:ab:a3:09:b2:05:30:f0:54:4c:
                    bc:d2:49:8d:1c:37:9c:7f:58:82:06:08:9d:9b:d5:
                    29:1d:0f:38:22:3c:e5:48:36:4d:01:3c:e7:cb:4c:
                    06:b9:be:47:58:69:25:54:29:a3:b0:6f:90:4a:3b:
                    d6:ce:19:9b:6a:9e:70:86:e6:40:08:aa:96:29:bd:
                    2f:78:86:a1:0d:25:22:37:e6:d9:e8:84:e3:2e:3c:
                    ad:b6:be:83:fa:41:17:14:aa:ba:7f:66:97:b6:1d:
                    85:1f:f6:ab:cd:2f:f1:42:38:b7:40:ff:bb:b1:31:
                    7d:a0:e9:d9:36:f4:f1:1e:dd:d0:23:3a:3e:2e:a3:
                    5b:2f:5a:cf:c2:68:1d:a3:ec:1c:4c:a0:63:0a:99:
                    de:5e:98:22:1a:e3:f4:8e:bf:44:7a:24:d7:92:0a:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:99:E8:E4:05:F9:64:13:CA:CC:EF:EB:03:10:31:85:E6:87:A6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:e1:b9:3b:18:b4:7a:b5:7c:54:fc:9e:76:0b:d6:79:cc:
         ed:c5:2d:a9:0b:f6:22:6c:62:72:42:f3:ff:73:f5:c5:bd:b6:
         6e:b7:8a:9a:44:67:de:45:3c:30:72:42:b0:98:e2:64:99:d5:
         ec:a5:d8:89:b0:fa:d1:34:51:47:bb:05:cd:74:84:2c:8a:2f:
         c8:dc:6d:c6:c6:ca:08:a7:43:97:9a:c0:aa:a3:a6:d9:cc:65:
         25:b5:aa:20:ab:e1:51:16:ad:2d:88:b1:39:f0:97:36:5d:f9:
         1b:dd:ef:f3:16:27:ee:0d:8b:44:ec:8d:c5:93:04:87:67:a1:
         15:af:9d:5d:60:f0:93:05:28:65:a9:4e:44:05:77:d1:39:1c:
         fd:56:e4:5b:08:88:f5:08:6f:66:ea:64:87:c2:dc:c4:13:20:
         a1:42:b1:94:2c:29:ef:bb:cf:4d:c9:ef:82:1c:b3:1d:08:a9:
         2a:a2:43:86:17:a1:48:4b:65:4f:4b:51:4a:ee:f8:8c:14:8d:
         96:ea:2b:e0:7e:24:87:49:4f:8d:43:d8:e8:0e:8e:e8:cb:4c:
         10:ad:6b:62:ce:d7:73:16:99:12:76:b1:78:a3:32:49:b3:2b:
         37:a3:fe:45:77:f3:c0:98:3e:2c:ef:08:d9:bb:db:59:40:e7:
         21:10:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:28 2025 by rpki-client