Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/d6d339bd-c77b-371b-ba1e-9b570e339c55.roa
File:                     d6d339bd-c77b-371b-ba1e-9b570e339c55.roa (raw, json)
Hash identifier:          KC/vJoGqPIn4yIzhC4OIpGKm25T09HED8/1bNkH7ChM=
Subject key identifier:   0C:3B:A4:7C:5E:BF:38:DA:BE:44:3D:81:5A:48:FD:1B:E2:9C:99:C6
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F4328584B891775877B78CEBD073AF100
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/d6d339bd-c77b-371b-ba1e-9b570e339c55.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     49102
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:75:87:7b:78:ce:bd:07:3a:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=cec79bbe-617e-4ffc-ae62-25835c67467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:d6:b8:80:45:de:37:75:28:61:2a:56:00:
                    55:8c:24:f2:34:89:9c:91:40:28:f1:d7:46:d9:17:
                    57:2a:71:b5:de:6b:73:20:14:a6:bf:cc:52:95:30:
                    b8:c8:b9:3a:4d:de:9a:8f:f5:95:98:5a:08:c6:44:
                    e9:39:ce:1f:2e:b1:dd:a8:db:45:c2:a1:28:9d:ad:
                    36:ca:60:c1:d8:f8:7a:94:f5:47:5d:c1:54:1e:df:
                    87:f2:a1:57:ba:a3:8f:37:e9:7b:56:07:b3:8e:01:
                    c9:20:dc:0d:78:e5:48:a9:8e:72:b9:22:c1:b9:c0:
                    2d:5c:33:1f:b9:65:80:16:e7:9d:c7:d5:2f:59:fa:
                    f1:4e:b1:79:30:a3:f3:78:5d:3e:c1:28:8f:1c:69:
                    56:34:12:e0:29:03:25:4f:3f:cf:b7:fd:bf:78:56:
                    80:d3:00:86:ef:23:9c:5c:90:e3:01:d2:9c:94:6b:
                    31:82:28:64:cf:27:31:9f:35:2e:5a:6d:be:26:72:
                    a3:08:6f:d7:ff:aa:d7:ea:11:28:86:85:93:33:6d:
                    d2:7e:3c:f5:81:fe:71:16:0c:80:f2:f4:60:1b:f7:
                    f2:b3:26:9b:07:f9:55:32:19:de:cc:e4:19:59:fb:
                    f9:21:b0:4e:25:2e:b0:0d:45:63:8f:44:2e:74:31:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:A4:7C:5E:BF:38:DA:BE:44:3D:81:5A:48:FD:1B:E2:9C:99:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/d6d339bd-c77b-371b-ba1e-9b570e339c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:45:b2:c5:be:9d:64:d9:8f:7c:02:8d:1b:21:5d:ed:0b:
         78:ee:39:d6:11:02:86:8c:e3:89:b3:18:b9:e8:1a:c2:0c:89:
         e5:0d:f9:61:dd:3b:d1:b6:1f:a4:dd:33:30:4e:25:dc:a6:e2:
         df:f0:54:b4:3a:4b:d1:0a:1e:6f:f6:5c:42:d2:a1:ee:32:45:
         60:80:f6:30:6d:ec:f5:d7:72:6c:4c:54:f9:cf:0f:26:1a:f8:
         b6:cf:61:7f:ff:e9:59:3b:d9:d0:46:1a:36:30:df:fe:ae:b4:
         b8:7d:a6:be:64:ed:e0:52:36:8e:3e:96:e2:fa:b6:ac:d7:1d:
         25:9f:aa:b3:24:22:d4:91:c0:76:14:20:ea:8e:b5:e7:22:46:
         73:2b:91:cd:c3:94:40:e8:d5:28:0c:d5:44:d0:67:d8:b3:e0:
         ee:33:53:2f:fd:5e:b8:e8:21:5a:c2:46:08:22:e8:a0:35:89:
         6e:35:8f:1b:2a:7a:36:06:e5:59:f2:fa:1e:b7:bd:1d:aa:5f:
         a2:15:2f:f3:81:53:d7:51:2e:ff:bd:13:ad:82:c4:26:36:9e:
         e6:6e:2b:cc:5e:1e:c0:5a:bd:bf:4c:33:34:6b:91:e8:ec:a4:
         23:5f:83:c2:47:e8:69:81:9b:96:6b:94:bb:9c:17:70:8f:86:
         4e:7f:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:20 2025 by rpki-client