Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b52e86dd-8cbf-337a-819b-983b42c0467d.roa
File:                     b52e86dd-8cbf-337a-819b-983b42c0467d.roa (raw, json)
Hash identifier:          H/vCXgw4+Cs/GrYDlik6bapOkeJCJ9xxcM5/NCVk8+w=
Subject key identifier:   58:A5:03:FC:BF:3A:BE:20:1C:E9:BE:0F:D6:FB:69:F7:F7:E3:60:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8D47869E4CDB8D59B3C17100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b52e86dd-8cbf-337a-819b-983b42c0467d.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     396595
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:86:9e:4c:db:8d:59:b3:c1:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=0da4ca10-5b5e-44c2-9f6c-3ae6a5389c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:5c:08:55:a8:ce:91:d0:76:26:97:d1:a8:
                    b9:eb:cd:e2:41:2f:71:85:e8:58:a8:b8:0e:b3:35:
                    a7:02:2c:a2:bb:13:2e:5e:6e:60:bc:30:65:cf:04:
                    a3:48:ec:a8:d2:d6:9b:77:04:4e:e2:f3:de:e5:50:
                    a7:f6:87:0f:ac:0b:51:c9:23:7b:be:fc:fd:98:f7:
                    af:d2:12:3e:82:4f:28:c8:b0:76:c5:88:2e:c0:bc:
                    d3:41:5b:7a:2e:cd:db:7b:28:cb:bd:7b:63:9d:5c:
                    cd:06:5c:74:14:19:c5:a8:21:2b:bf:9c:95:af:8a:
                    1f:f0:3c:48:e5:cd:14:c3:3e:1f:ec:8d:d8:48:05:
                    7a:b9:aa:5e:b4:da:30:21:7c:e5:98:dc:73:7b:c8:
                    85:f2:f0:e5:4a:b3:39:da:a7:56:bc:4f:be:0c:99:
                    62:61:6f:be:56:18:49:00:1c:b1:44:ed:60:c9:a5:
                    9f:c6:d4:f6:3c:7f:81:1f:10:04:68:13:3a:85:2c:
                    e7:14:b6:eb:da:61:72:16:2e:b8:01:61:4c:d7:96:
                    3a:43:be:6c:51:b7:70:2a:ab:bd:d0:02:e5:6d:0f:
                    5e:6b:d4:91:b3:ba:b3:74:86:93:f4:31:21:9c:a3:
                    ff:55:0f:f4:aa:5e:f6:4d:e8:6d:12:7a:75:ec:1e:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:03:FC:BF:3A:BE:20:1C:E9:BE:0F:D6:FB:69:F7:F7:E3:60:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b52e86dd-8cbf-337a-819b-983b42c0467d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:49:4d:16:6e:c7:b5:3a:e6:d4:5c:4d:3f:c6:7f:3e:94:
         ef:bb:0f:61:22:fd:e5:05:96:fa:6b:0d:d6:3a:e9:98:5d:65:
         07:3c:ef:de:cc:d6:e8:15:7e:3d:62:db:03:66:93:f4:0d:34:
         83:8b:22:6f:30:62:46:8d:8f:5a:a6:1a:67:86:da:1b:30:18:
         31:f5:cd:3b:fe:19:2f:58:f9:ba:78:33:0d:88:a9:05:b6:e3:
         90:4a:a3:92:dd:47:1b:e8:87:c0:2b:69:df:03:15:df:74:73:
         68:82:51:8b:49:2e:e6:e2:b4:a0:26:23:aa:fd:70:7d:14:13:
         5f:23:1e:a3:f0:be:62:98:a5:e6:17:e5:eb:51:7f:c3:fa:b9:
         7c:5b:03:4f:84:b2:52:d4:9e:35:4b:d8:df:f5:4f:1f:01:74:
         2f:2b:ef:d9:74:79:5b:b5:07:23:4b:9b:5a:3b:98:e9:97:cf:
         2f:38:d7:b7:59:39:d3:2e:55:3e:8d:d8:dd:09:6e:b6:1f:7c:
         c8:53:13:7a:e6:20:ee:62:b0:ca:18:c9:46:17:49:de:c9:63:
         51:eb:31:e4:53:e0:9b:38:d0:c7:6f:e3:f3:08:d7:b2:93:fe:
         6b:1e:54:2e:d0:7b:91:a3:25:e2:59:30:b0:da:1a:44:4c:d8:
         79:07:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:55 2025 by rpki-client