Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c43c0eb-bbef-32f8-82db-65835d7f6303.roa
File:                     8c43c0eb-bbef-32f8-82db-65835d7f6303.roa (raw, json)
Hash identifier:          RBmxNGaX4uGsx6mOeqXsVvcnya61y7b0nhqGVN5guwo=
Subject key identifier:   56:6E:57:62:D7:7B:28:2A:85:4E:E9:59:AB:5A:80:D4:AC:C1:FB:F5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B2140FCD1E8B7F08BD809ACC0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c43c0eb-bbef-32f8-82db-65835d7f6303.roa
Signing time:             Mon 08 Sep 2025 20:20:19 +0000
ROA not before:           Mon 08 Sep 2025 20:20:19 +0000
ROA not after:            Sun 07 Dec 2025 21:20:19 +0000
asID:                     8987
IP address blocks:        144.125.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:40:fc:d1:e8:b7:f0:8b:d8:09:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep  8 20:20:19 2025 GMT
            Not After : Dec  7 21:20:19 2025 GMT
        Subject: CN=b664d528-e041-448e-b90f-1cd165360d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:24:20:7b:75:b5:be:ab:7b:98:78:ef:6e:
                    3c:c5:0d:75:ad:39:79:79:5b:c7:7c:7e:6c:ab:11:
                    49:49:17:c8:39:23:8e:09:6b:ac:17:6b:c6:39:f8:
                    84:96:c7:4f:0b:3f:b2:36:e7:4f:57:ca:4b:9c:2b:
                    ca:42:b1:d5:78:e9:d9:99:ad:07:65:07:a9:39:da:
                    0a:11:b9:d9:1a:2b:1e:50:df:ec:23:fe:6f:29:e7:
                    e0:ed:02:f0:e3:a9:cf:fc:d9:28:e9:63:b0:e5:da:
                    e7:72:dd:82:20:92:50:9a:0e:bd:67:27:4e:7f:ce:
                    36:02:03:94:94:aa:97:d7:fd:90:ce:d6:3c:b4:98:
                    79:62:da:30:8d:3e:f9:f4:9b:3c:5c:6d:2e:2a:6b:
                    18:e6:03:97:ef:ac:3b:7e:2b:24:6d:1c:2b:4b:82:
                    a5:cc:ae:93:df:10:0d:00:71:9d:2d:31:fe:14:6d:
                    2f:8c:d8:6f:bd:7a:05:5f:b0:99:14:91:65:5a:6f:
                    1c:56:84:a5:d0:78:44:38:80:5a:ec:f8:0e:7e:09:
                    09:a5:9f:cf:b1:41:77:8d:7b:72:89:ec:88:a7:e1:
                    e8:6d:ab:00:b5:5a:fc:cb:4e:93:ca:1b:10:da:4d:
                    12:eb:92:8d:1d:ff:28:11:2f:a4:4c:0a:e5:69:e9:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:57:62:D7:7B:28:2A:85:4E:E9:59:AB:5A:80:D4:AC:C1:FB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c43c0eb-bbef-32f8-82db-65835d7f6303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:5c:f1:a0:18:d9:f7:32:1e:0e:84:30:e0:da:e3:84:08:
         c7:6c:d8:7e:06:cf:8c:61:ce:6e:cc:69:2d:8b:40:07:dc:f6:
         46:1e:dc:59:a6:be:00:31:82:8f:18:c6:75:70:54:03:1e:ad:
         d7:43:fe:dd:9d:b4:34:62:9e:24:dd:fc:7c:5f:0f:5d:09:bb:
         23:e3:86:00:63:b9:b8:ab:ec:06:0b:5b:f8:e2:f9:16:67:f3:
         77:67:01:ae:5d:46:44:72:e7:f6:8f:e0:b3:e3:de:34:cf:d9:
         d0:32:0b:b3:2b:6c:dc:72:45:96:ab:59:9d:21:30:4e:54:f7:
         e6:25:ce:95:b7:1b:84:57:06:a2:80:e2:00:ef:f2:79:06:1a:
         f5:7e:85:52:b9:73:62:7d:70:ec:f5:c6:9f:c8:d1:aa:f6:c8:
         09:89:72:8a:84:e0:a8:e2:63:fd:af:cf:23:80:d8:07:7d:33:
         b6:d3:8e:2c:a4:f5:fd:79:39:3c:36:0a:e0:04:23:1b:ba:79:
         d1:0f:51:e0:23:a8:e7:16:90:16:99:96:17:9f:81:51:9b:eb:
         a4:d2:e3:5e:14:d8:11:d3:d1:61:fc:ed:8a:2b:3b:d3:3c:c3:
         9d:08:83:09:89:6d:ff:fe:97:7b:c1:d7:f1:5f:d7:91:39:ba:
         4b:95:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:53 2025 by rpki-client