Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9c6e792b-7928-3275-bf43-a3f8cbbfbb69.roa
File:                     9c6e792b-7928-3275-bf43-a3f8cbbfbb69.roa (raw, json)
Hash identifier:          hxwy0Cr65klSWKJDjHTA4S4usJP5Q8aH2m73CkHuBSo=
Subject key identifier:   CC:96:88:B8:2E:81:60:86:CF:B7:25:A4:A6:29:82:4B:68:05:FE:38
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B583C851B7F1944F4A0DB2F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9c6e792b-7928-3275-bf43-a3f8cbbfbb69.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     5400
IP address blocks:        130.41.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:85:1b:7f:19:44:f4:a0:db:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=1ec1eea6-09e0-4bb1-a34f-8d00e9d52132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:81:2f:32:12:e4:19:ce:78:f2:0c:7b:1f:
                    cf:bc:b4:da:b5:96:e6:c9:01:9e:df:8a:e1:f8:40:
                    f8:9b:b6:7c:f6:49:63:9e:5d:0d:5d:95:96:0d:12:
                    69:55:47:8e:4e:99:8f:c8:98:8e:eb:a5:98:e4:bf:
                    30:1f:54:a7:be:d8:06:08:14:0b:50:54:3d:46:d6:
                    10:b0:9b:0e:41:0e:48:d8:0f:4f:aa:8b:d7:dc:b2:
                    a7:ee:70:d8:31:4a:bc:42:46:42:35:b4:a8:ad:cc:
                    c4:e1:7e:30:c5:fa:f0:fd:9a:67:8e:89:f8:a7:04:
                    df:13:91:46:46:57:d8:3a:aa:71:1e:a8:d4:22:98:
                    56:20:11:6a:5a:66:c8:20:9e:72:1e:3c:5d:35:51:
                    8d:da:95:d2:ab:f4:e0:fb:2b:eb:2d:6a:f2:a1:ce:
                    87:ac:54:ed:e2:97:11:09:1c:49:03:06:1b:43:24:
                    e3:f2:2f:b7:83:47:16:7e:ef:46:8a:69:4f:92:d5:
                    ec:6a:21:15:2d:80:7a:f5:ef:06:22:ba:8b:99:5c:
                    37:fd:0f:e5:89:21:cd:12:29:d0:aa:ee:df:4c:d0:
                    e5:f0:0b:1b:1a:41:99:8f:86:1f:de:db:17:07:48:
                    ea:53:e2:df:61:ce:5e:0e:ff:11:2b:11:e3:b6:93:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:88:B8:2E:81:60:86:CF:B7:25:A4:A6:29:82:4B:68:05:FE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9c6e792b-7928-3275-bf43-a3f8cbbfbb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:8a:47:19:19:db:9b:7b:ce:21:f4:14:45:92:d1:cc:69:
         97:3e:4f:0a:be:09:f7:2c:c0:d4:0d:fb:4e:91:1b:b7:46:0c:
         60:e2:18:12:2d:8c:a5:4f:31:b5:25:72:b9:06:03:37:d1:69:
         a7:6c:48:e9:85:bc:ab:a2:ee:71:54:55:df:6f:db:eb:a7:89:
         82:c4:a7:20:4a:38:26:12:eb:db:5a:f7:1d:db:cf:37:a8:c8:
         0f:fa:a6:e4:28:56:ee:c2:ad:f2:54:40:54:7b:71:59:44:0d:
         f8:b8:48:3a:bc:00:bc:af:c1:39:02:4d:53:74:1c:8d:73:8d:
         8f:5b:fb:1f:af:e2:8a:f1:4a:4d:e6:8d:31:1b:31:75:70:d2:
         9b:5d:38:37:20:72:21:73:84:33:fb:54:ae:f2:4d:4d:c5:ed:
         18:97:e8:e9:c8:e5:cc:44:19:99:f0:7b:6c:a0:cb:c2:11:d7:
         42:f2:64:ad:62:95:2f:8f:1f:ec:03:ca:7e:7c:73:f1:be:f9:
         27:3f:4b:e6:0c:34:8b:a8:2a:1e:08:04:c3:3a:94:2f:2b:6b:
         b4:b4:4f:0b:c0:1a:e9:57:1e:fa:f9:43:50:92:e5:60:a6:5d:
         34:4f:f5:02:c0:c2:58:69:9f:fe:19:77:c4:26:23:36:83:10:
         32:3b:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:56 2025 by rpki-client