Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
File:                     62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa (raw, json)
Hash identifier:          oqx1MVqrdPq46IYMSoytCQjtFMXamzfUMdO7rkmunQ4=
Subject key identifier:   28:3B:4F:72:71:3D:EA:4B:6A:60:6B:DD:9D:DE:AB:C3:63:A4:E8:E0
Certificate issuer:       /CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
Certificate serial:       010D0C9F4328584B64CCBEC524641E82B0940080
Authority key identifier: CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     8075
IP address blocks:        192.131.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:be:c5:24:64:1e:82:b0:94:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c9662449-5607-43f3-a036-a1c4bbd57810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:d1:6b:50:7c:38:43:87:49:3e:61:8f:29:
                    58:d6:0b:e5:c6:7b:08:80:7f:7b:0c:76:17:bf:7e:
                    9b:33:02:a9:22:a8:f2:fb:dc:09:03:97:d9:c7:e7:
                    31:63:ba:b2:bc:f7:4a:a4:ae:2b:fc:0d:0d:7a:74:
                    83:c4:2a:83:a1:4e:ba:e1:29:e3:e7:48:1b:45:97:
                    99:38:40:e2:04:9b:d5:ad:d3:e3:6a:cc:61:b7:5a:
                    ce:a1:06:05:62:a1:d9:8b:f9:a5:8c:77:e7:93:13:
                    bb:a3:43:bc:9f:b9:1c:d5:f8:31:59:a8:40:3a:8c:
                    cd:b5:db:67:b7:f0:ef:5f:40:e1:4b:ff:05:e0:2c:
                    95:eb:3b:67:d2:70:69:d9:27:df:ab:5b:81:99:5e:
                    ad:b7:c9:8d:b6:e7:8d:97:52:e2:ca:7d:5a:7a:ca:
                    20:9c:2a:f3:72:b4:e9:6a:4f:b8:5c:b1:2d:02:30:
                    64:4b:9e:8b:5a:de:cc:dd:68:e3:e1:f2:4a:30:f3:
                    94:5b:92:26:66:90:41:79:84:02:c2:28:13:e7:b7:
                    3d:d1:db:ab:29:ba:6d:38:54:05:e1:d1:4d:d3:2f:
                    02:14:4a:e3:74:3b:d4:a7:b0:1e:8d:bd:2d:0c:af:
                    17:b7:f7:fb:cf:9f:1e:5c:98:c0:7b:e3:de:a8:bd:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:4F:72:71:3D:EA:4B:6A:60:6B:DD:9D:DE:AB:C3:63:A4:E8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl

            X509v3 Authority Key Identifier:
                keyid:CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b5:6c:6a:f7:9f:9d:a6:5d:5f:04:3c:5a:fb:eb:e8:2f:64:
         ff:2c:f8:a6:a2:cf:18:1a:76:47:f2:6b:de:a8:ae:f6:16:5f:
         56:90:6e:11:5b:50:87:d8:22:00:62:81:b2:d4:ee:12:a7:9f:
         8c:08:1c:de:80:87:d5:43:53:1a:ac:a5:de:80:b3:7c:20:c0:
         97:4d:55:85:7e:26:e8:9b:69:8f:90:dc:91:f8:b7:c1:80:ec:
         2d:a8:c6:5d:22:ac:4a:0c:11:ba:37:ca:84:18:be:97:b8:85:
         28:e9:ff:fd:69:3c:00:07:15:c8:40:dd:c4:be:6e:f3:1b:e0:
         8b:52:7a:57:67:7f:64:fb:c2:36:55:0e:50:f5:cb:91:03:f8:
         f2:93:42:00:5c:10:47:b6:02:3e:85:80:98:af:54:3d:c5:c9:
         ae:8a:6b:4c:98:c3:8e:a4:36:04:32:b0:da:49:1f:be:b4:d0:
         82:fb:33:d0:04:d0:39:92:32:b4:29:0a:65:7c:8d:94:ba:77:
         17:ad:c4:8b:60:bf:35:13:50:ae:fa:fe:c6:17:7c:45:f8:2b:
         a9:c0:44:3d:45:70:c7:b6:82:2b:9e:93:17:99:6b:25:a3:73:
         d5:da:80:94:48:09:6d:97:bc:23:6d:f8:29:64:ff:e5:bb:ac:
         16:cf:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:27 2025 by rpki-client