Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa
File:                     c6ef55a1-667d-3f34-b165-406b071c6b4d.roa (raw, json)
Hash identifier:          UO+NYEBxPDFxAkFsVamE2Z7BE/cyzYRdlqQIIGqqYAA=
Subject key identifier:   EB:F8:3A:13:C6:77:C5:2A:4D:BA:05:35:9A:AC:EC:1E:8F:78:49:91
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F4328584B38219735F98A605035276780
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     19381
IP address blocks:        162.211.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:97:35:f9:8a:60:50:35:27:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=f60f7599-06a7-4951-877e-10d3e9351e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:0f:0b:d7:4b:1f:a7:2b:79:6c:47:f6:ed:
                    0b:af:de:8a:54:db:3d:f6:08:68:c1:42:58:e9:f2:
                    e7:d1:9b:b0:ea:72:58:80:88:47:db:d2:04:dc:81:
                    72:8d:95:a6:9f:f7:3e:45:d2:c7:d0:d1:24:e7:e4:
                    58:61:df:15:ce:31:a1:b4:38:33:88:d6:a2:de:36:
                    e5:63:2f:2f:cf:08:07:67:20:0a:21:2d:93:c0:ab:
                    3b:9c:70:48:9d:1b:4e:bc:ae:fc:d5:e2:3f:3d:ea:
                    7d:ba:ee:18:72:1f:ab:46:e7:bc:5a:f7:69:cd:da:
                    50:0f:b5:ae:bc:c6:29:14:2e:6a:e9:36:17:40:e7:
                    3d:99:44:08:92:4a:55:40:a4:4e:2b:16:f8:02:4e:
                    10:ba:93:60:fc:b9:f0:bd:61:0f:b5:57:10:16:34:
                    ab:55:86:7b:2f:52:63:8e:ff:92:63:8a:f7:14:3d:
                    cc:36:b9:a9:29:30:5c:4d:5e:16:ec:9c:d0:5a:81:
                    32:b8:1c:7d:ce:41:b1:73:89:b1:06:6b:f8:85:de:
                    79:dc:85:aa:d0:37:e5:d4:45:4f:f1:ef:12:07:4a:
                    87:61:ed:b9:84:9d:54:2a:7e:ab:73:a3:46:9f:26:
                    64:81:f5:6d:99:17:31:f0:66:b3:c5:88:42:1c:31:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:3A:13:C6:77:C5:2A:4D:BA:05:35:9A:AC:EC:1E:8F:78:49:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:9c:8b:40:da:04:eb:ea:93:5d:af:f6:fa:aa:91:78:1a:
         03:3a:13:b7:7a:06:5c:28:80:81:8a:d7:bd:6a:8a:d1:2f:c7:
         70:86:fa:3b:1b:35:16:bc:76:c1:e6:34:c0:13:64:43:7c:64:
         71:fb:fe:42:c6:4a:54:1a:c4:ab:d7:43:10:0b:5c:1e:8e:12:
         34:3a:f8:f0:bd:57:49:5e:c0:17:fc:de:38:5b:19:4f:5b:bb:
         59:19:d7:b7:9a:06:2a:0f:ba:a1:42:22:5c:d7:54:3a:45:92:
         05:b1:cc:6b:a1:43:9f:bb:85:a8:81:52:40:1b:42:1f:bd:74:
         76:ea:53:91:48:b9:d1:da:d4:0a:89:d5:e8:2d:fe:71:70:e4:
         f3:90:45:9f:9a:a6:88:94:8a:40:bf:42:76:c6:1b:f4:c9:45:
         56:db:17:ab:14:b3:50:96:9a:db:f7:c6:bf:1b:b8:54:be:6e:
         54:af:74:ec:dc:0d:c0:e9:9a:61:96:e2:1b:32:49:99:52:00:
         81:ac:88:2d:24:a6:73:fa:44:e9:be:ab:c5:5c:56:c7:34:54:
         04:cc:fd:2e:54:d4:28:53:c5:c1:87:8b:66:94:47:d3:4e:b3:
         a9:b0:98:2d:e1:9f:43:49:77:ee:7a:ac:32:8e:5d:a9:5a:a6:
         46:28:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:33:14 2025 by rpki-client