Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/43f3c3f5-cba0-3efb-a2c3-2e797cc9138d.roa
File:                     43f3c3f5-cba0-3efb-a2c3-2e797cc9138d.roa (raw, json)
Hash identifier:          nnbzKqgr7E1jqHMrqMT0xNZVWsrl2vi8b04DsRxcyMc=
Subject key identifier:   D7:BC:48:AA:EA:CC:AE:7C:FB:34:CF:61:E1:1B:A9:FA:C1:8C:37:E4
Certificate issuer:       /CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
Certificate serial:       010D0C9F4328584B80B757E4993900144FE2BF10
Authority key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/43f3c3f5-cba0-3efb-a2c3-2e797cc9138d.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     54797
IP address blocks:        198.28.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:57:e4:99:39:00:14:4f:e2:bf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=2355b445-8be7-451e-88e0-b97e83b2c4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:dd:79:71:f9:b3:1f:93:ea:7e:c4:fe:7c:
                    24:71:69:b6:e2:61:9c:cf:7a:57:e8:57:2b:1d:44:
                    e8:ea:e0:9c:8a:d9:42:1b:07:3a:29:90:50:0b:db:
                    ae:41:f7:b0:64:80:3b:6b:fa:15:23:4e:0f:df:53:
                    9d:e4:6d:67:ad:e0:c7:f1:f6:81:d0:05:7e:2e:76:
                    e4:2b:bc:c3:60:bd:1f:4c:4d:5a:9e:eb:08:a1:30:
                    9f:7a:ce:7d:c1:a4:5f:a6:dd:8f:5c:36:17:d6:5e:
                    af:de:8a:e5:64:28:e1:59:07:df:b1:3f:b7:de:f0:
                    b6:74:70:04:8b:d6:12:6d:cf:67:83:81:9e:6a:c3:
                    af:4e:aa:2c:4c:22:f0:ac:5e:c4:c1:64:9e:2a:b0:
                    f2:7d:d5:0b:05:11:dc:ba:61:54:f1:08:18:d1:00:
                    39:f4:5a:4c:0b:30:c4:ad:da:23:97:a1:85:83:ba:
                    ac:c6:37:99:a8:ca:76:1a:19:11:91:0e:2f:e8:6e:
                    32:60:88:df:f8:04:3e:b8:fe:e6:fd:e5:97:da:13:
                    60:83:f7:a2:9f:35:14:fe:77:d8:f7:d5:39:f7:17:
                    27:a4:e2:ac:57:66:55:b6:0d:03:3a:04:9b:da:ed:
                    c2:84:ea:83:6f:a4:e3:f0:d9:f4:e0:37:4f:10:91:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:48:AA:EA:CC:AE:7C:FB:34:CF:61:E1:1B:A9:FA:C1:8C:37:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/43f3c3f5-cba0-3efb-a2c3-2e797cc9138d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:83:0b:bf:e4:eb:2b:36:c7:73:56:ea:08:e2:bd:a5:42:
         ad:31:ca:bd:c2:fe:01:f6:6c:14:1b:9f:f5:2f:25:eb:44:64:
         55:ef:22:23:af:67:5d:eb:7c:f8:c5:24:99:7a:55:c3:28:a6:
         79:8c:ff:30:37:be:3c:94:3b:c5:9c:e2:6c:2b:e5:c6:ba:da:
         55:b2:13:78:a8:bb:85:d7:8e:97:29:42:30:8e:2b:8a:c9:7f:
         f0:79:36:51:eb:c2:e7:a0:fa:90:09:40:89:07:ed:c9:b7:d2:
         1d:aa:36:10:56:4e:1e:95:8e:f9:a2:03:c8:62:eb:7c:64:20:
         94:bb:ad:81:86:f7:22:1e:a1:5b:ab:85:31:2d:dc:5a:e8:ce:
         0a:b4:c5:26:28:1b:7e:f0:c1:b1:42:d7:1b:5e:47:c1:5b:3e:
         32:a2:03:95:6a:ba:e9:b6:6f:af:d9:18:4b:ed:8c:12:19:a8:
         3b:99:ff:0f:44:8b:c6:e6:a1:a0:b6:f8:ce:fd:f1:b1:e3:08:
         12:3c:89:d3:42:61:27:77:73:bd:8d:50:cf:37:ae:75:99:fa:
         5a:51:86:60:65:3d:f7:b5:ba:a7:d2:f7:2b:9b:ef:92:7b:4a:
         27:50:6a:da:f7:0e:9a:93:a2:13:bf:e3:c4:eb:28:5e:5a:15:
         c4:31:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:58 2025 by rpki-client