Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa
File:                     d94a879f-4b83-3263-bcce-62688a17478d.roa (raw, json)
Hash identifier:          1G4D1wqSg/ia8QDM198Z8lqvWTgIdJOzx7TOaSQrCrM=
Subject key identifier:   67:D4:0F:9C:BF:C6:08:C1:7E:0A:B9:BF:85:B7:2C:12:E5:3A:79:B3
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B8BE212BCC90FDBD69F3DF600
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        148.163.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:12:bc:c9:0f:db:d6:9f:3d:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=62d0fae0-336c-4462-8a03-6b25fffffb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:42:82:50:ae:e3:00:c8:95:f3:23:d9:3a:72:
                    96:bf:e9:9d:9d:29:94:d0:46:2b:1b:95:5e:a1:b8:
                    0b:e0:44:28:6f:ba:1c:81:1a:71:69:51:c2:4c:32:
                    1d:92:5f:27:22:12:e6:60:88:c8:15:59:b7:72:e4:
                    bb:b6:16:0e:83:ea:15:09:c4:9e:2e:52:5f:60:8a:
                    4f:ca:e6:4d:d8:b6:17:4f:bc:30:c7:fc:c3:fa:33:
                    c0:2d:89:a9:e4:83:da:d6:ce:a8:68:2f:88:da:8e:
                    40:5b:8d:73:1c:02:6b:74:a7:ad:dd:2c:f2:57:f4:
                    c6:16:58:34:3f:ec:41:6c:00:ff:71:5d:f0:58:f4:
                    88:8d:1b:2c:d4:b5:8e:c6:68:f8:e8:4c:63:01:4c:
                    a0:2d:75:fa:e2:a6:d4:5f:e0:73:7b:7f:9a:70:d7:
                    ae:33:85:fa:d7:f0:eb:d7:a8:ba:c6:99:d9:6a:31:
                    16:de:3b:93:01:74:f8:0c:df:7d:70:72:7a:76:a1:
                    eb:cf:5d:72:66:b7:54:f8:9d:06:6c:d7:77:8d:ab:
                    33:0f:c3:6d:50:8b:b0:4f:af:a9:24:e0:cc:8e:e5:
                    f5:80:0a:c3:6a:d4:de:94:ac:6b:3b:26:1e:67:bf:
                    fd:f0:90:ae:0b:1e:0c:f7:de:30:6e:e1:2e:89:bd:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D4:0F:9C:BF:C6:08:C1:7E:0A:B9:BF:85:B7:2C:12:E5:3A:79:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d94a879f-4b83-3263-bcce-62688a17478d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:53:96:fd:30:c2:84:aa:ed:1c:09:3a:f5:00:80:11:13:e2:
         76:85:cf:99:bd:47:65:13:fe:e0:0f:59:3e:47:05:68:bd:84:
         89:16:e9:ef:b9:19:30:e9:0e:4a:5b:22:4c:b2:41:3e:16:fb:
         9f:d0:63:76:83:2f:0e:e7:c5:f1:7f:bc:52:40:13:07:3b:a0:
         3b:de:bd:ae:a8:fe:6c:3f:08:42:a2:68:5c:dc:7d:a7:e4:a1:
         c4:28:fa:c0:16:fe:1e:c7:32:70:90:c3:30:ff:dc:13:19:da:
         0a:4c:d0:11:96:fc:44:64:44:ad:78:ad:f1:04:76:f3:5c:ff:
         97:83:f6:fd:ca:2d:b8:ab:22:53:9e:a8:32:f1:36:28:13:ac:
         b6:b6:11:4f:f3:06:5c:c7:33:5e:01:c6:7e:85:ad:32:14:84:
         61:bd:dd:39:05:aa:d3:d1:ed:fb:41:13:2e:2e:9d:69:58:62:
         e1:a3:db:5d:3f:3e:52:aa:55:34:a6:6e:b4:17:d1:3a:94:ae:
         a2:ad:96:04:ed:98:39:c6:d8:83:e6:ef:4f:9a:e1:7b:1b:16:
         70:62:01:a3:e9:ac:96:92:b4:90:31:8d:bb:e9:ee:62:4d:f2:
         ce:70:2f:19:22:cc:58:61:66:0b:11:aa:27:3e:92:8e:dc:92:
         b1:32:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:05 2025 by rpki-client