Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa
File:                     212383df-73c1-368f-8130-a8b9402b01ce.roa (raw, json)
Hash identifier:          GRwmLmlz7FUI3Js2Sq00eGeRpRNcANzGlf+OKa+C0Wo=
Subject key identifier:   32:60:2A:6C:5D:88:CF:54:12:7C:CF:D5:E3:B6:54:F5:00:66:10:28
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B1F016BE70CBC7C3E1564A200
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     53813
IP address blocks:        165.225.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6b:e7:0c:bc:7c:3e:15:64:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=7adf2a95-9028-4fd7-816f-6747cf93cb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:9d:cb:47:db:bd:99:f5:29:01:9a:e4:b4:
                    df:ea:1e:f7:9f:60:e3:c6:fd:92:b8:a9:28:42:d1:
                    c5:45:fa:9e:2b:fe:ff:1b:bd:07:48:80:90:ac:f0:
                    2b:b4:8a:c6:ce:2f:5d:23:0e:60:89:12:04:be:18:
                    97:3a:5a:dd:7e:13:d8:26:22:95:ed:81:a7:11:89:
                    10:b5:1b:43:82:93:29:78:51:3c:d9:57:97:6e:38:
                    b0:8f:bf:35:f3:87:cf:11:ef:0c:5b:8a:9a:71:4c:
                    e9:f1:3e:d7:6a:b4:68:30:c1:c5:34:44:f7:04:a1:
                    ab:52:3e:33:21:1a:ec:24:ef:18:f4:bd:e5:10:e7:
                    ee:6a:88:06:a2:7a:e7:03:5c:d2:3d:cb:7e:2f:dc:
                    38:ac:e4:8c:cd:56:b8:5b:3b:99:2f:ab:6f:7b:a7:
                    13:25:29:c4:2e:e8:e7:2e:c0:9c:79:76:ef:ea:c9:
                    c0:d3:92:bc:ce:19:85:6f:fa:ad:79:f6:56:b7:8d:
                    92:c0:3f:df:8b:a5:2e:0a:d6:9b:7e:99:ea:68:cb:
                    81:a8:42:e7:3c:78:ff:d1:03:cb:b3:e2:11:6d:0b:
                    6c:bd:f8:40:a1:4b:0d:8a:14:f8:67:c1:1f:78:e4:
                    66:39:b9:6b:c2:99:2e:93:a1:ee:e1:4b:8c:ed:70:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:2A:6C:5D:88:CF:54:12:7C:CF:D5:E3:B6:54:F5:00:66:10:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:bf:19:fc:17:0d:c0:5b:d3:b6:f7:46:bb:62:7e:3f:71:
         13:18:5d:fd:63:be:cd:e3:72:8e:bc:21:cd:87:d0:70:40:cb:
         75:a6:c7:52:45:39:4a:32:fc:ad:a2:03:ac:c3:f5:08:55:50:
         65:05:5b:f7:85:ee:73:53:2f:99:13:28:22:87:47:e6:42:2a:
         75:e9:c0:84:74:4d:cd:90:55:60:ec:87:87:ab:ac:62:86:c0:
         20:01:92:68:cb:35:66:9c:42:bb:c3:b7:13:2c:17:bc:2c:29:
         03:5c:af:12:91:f0:ff:70:60:57:6f:00:1f:43:cc:0c:3d:6d:
         65:7a:21:7c:35:2c:91:27:46:ff:1f:e5:1a:1a:66:84:18:ac:
         c4:e5:41:48:20:15:bc:8c:ef:60:68:a4:2f:5e:55:83:a4:99:
         ee:15:2f:97:97:74:0f:42:66:91:6c:33:02:79:32:89:39:fc:
         4a:19:d1:5c:76:45:bf:e4:6a:fa:dd:5b:70:d7:56:5e:6e:8d:
         a2:1a:c6:be:f7:58:e5:34:0a:d2:a4:9d:c1:6a:b7:3d:51:83:
         2c:20:f3:b8:f2:cf:44:a3:ec:11:51:8e:bc:86:33:41:bc:90:
         f1:79:de:eb:7e:c9:aa:60:0b:62:bb:50:e7:08:ee:cd:af:91:
         2f:6f:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:48 2025 by rpki-client