Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eda572fe-ed38-36d4-b377-50d55092dfdf.roa
File:                     eda572fe-ed38-36d4-b377-50d55092dfdf.roa (raw, json)
Hash identifier:          9pmrCLWTPHk/Gwey9UIz1uJcTL/2+U/+0cpLiQ9buDw=
Subject key identifier:   29:3B:00:CB:D6:55:E9:EA:C8:B6:47:61:87:A1:BB:92:4D:BC:21:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F5267841FCB1B200DB13200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eda572fe-ed38-36d4-b377-50d55092dfdf.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396575
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:67:84:1f:cb:1b:20:0d:b1:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=0a3eb1b4-daf6-43b3-ae51-9b3b44b173ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:16:36:c0:60:db:99:6b:29:61:58:f4:f8:
                    96:5d:0b:3f:28:89:df:de:0b:73:39:c2:e4:bc:cd:
                    06:08:7d:75:2e:ee:12:02:9b:ce:1c:0c:54:54:b1:
                    ca:ee:69:99:cb:fc:11:1e:98:88:63:d2:5b:ea:dd:
                    2f:68:86:e8:33:95:44:09:ac:6d:48:19:18:b0:1d:
                    ec:22:8a:c3:6c:3a:9e:9e:7c:1c:f2:0d:c2:2b:11:
                    63:dc:58:90:06:19:ea:00:09:8d:44:a8:34:12:26:
                    2b:79:16:4b:9b:e6:51:6e:bc:a0:40:99:6f:76:9b:
                    e1:08:87:2d:64:c6:93:80:79:53:a1:9a:9b:40:d4:
                    75:34:6d:96:ee:92:0e:0f:cf:2a:3c:9a:96:8e:b3:
                    cc:db:72:bf:98:7e:83:58:c4:6f:88:91:89:88:2f:
                    57:4d:17:89:a4:2d:ab:3d:6f:d1:c2:62:a2:7a:98:
                    0a:69:45:a2:90:5b:62:a6:3c:fb:5d:a2:ba:e3:03:
                    d5:5a:fa:94:05:d9:ce:2f:93:44:35:c6:6b:a1:df:
                    85:d4:6c:33:3b:1b:33:d5:28:db:be:36:d5:86:56:
                    ff:b9:29:c3:29:2d:5f:47:8e:c0:86:eb:b5:0f:b5:
                    39:ff:99:1b:dc:99:f3:e7:b7:b5:04:13:38:22:ea:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:00:CB:D6:55:E9:EA:C8:B6:47:61:87:A1:BB:92:4D:BC:21:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eda572fe-ed38-36d4-b377-50d55092dfdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:64:6a:04:c6:40:60:a1:a2:36:a1:73:5a:49:f0:d6:94:
         39:4f:32:e2:79:36:1f:05:99:58:ac:df:bf:4c:e9:ba:37:1d:
         ee:49:b8:b0:de:7e:92:31:fd:88:9b:b9:38:06:88:00:70:6e:
         a5:97:72:69:1d:b2:bb:cb:28:8b:5b:37:3a:5d:04:9d:d9:d2:
         de:2e:10:00:e9:ea:b4:99:d6:e7:22:80:7c:f1:9b:89:7b:30:
         1a:08:1f:f4:83:bc:a6:99:3b:79:5c:a8:c4:f8:a9:27:18:00:
         7c:d5:99:7a:33:65:8e:db:19:a4:07:41:da:3c:18:b8:db:25:
         52:f0:8a:7d:54:5a:db:25:bc:36:d2:ea:78:e8:fa:19:79:90:
         c1:ee:17:2f:10:21:3e:6a:d4:85:be:db:76:89:f1:42:1b:8e:
         e0:e2:2b:df:76:cf:1f:dd:5c:95:94:a8:86:95:83:f2:91:20:
         25:d4:e0:52:fe:5e:68:76:b0:eb:a0:9b:74:43:26:d8:ea:8f:
         b0:5d:62:3e:63:f8:39:b7:fa:00:9a:e2:dc:1c:d6:43:8b:ea:
         96:a7:01:e3:86:be:b0:0c:3b:7c:ff:36:15:08:e3:60:b2:39:
         3f:6d:45:a8:a6:fb:19:7b:1d:cd:6a:fc:1c:75:5e:43:80:47:
         cb:40:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:24 2025 by rpki-client