Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa
File:                     8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa (raw, json)
Hash identifier:          L0y2JzAKI5zWFs1TZWR+8FxzwkKBJklG9GdrWQd59Jk=
Subject key identifier:   56:CA:67:6F:55:86:30:B4:45:A9:39:B9:74:28:6B:B7:80:39:AD:A0
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584B4D11DA73B2D1086C4A10B000
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     10497
IP address blocks:        192.86.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:da:73:b2:d1:08:6c:4a:10:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=2cfefe93-1c92-42a6-8381-659b1d664c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:24:7e:da:ec:fc:7a:07:a9:07:ef:46:1f:
                    3d:65:4c:84:a1:3c:b9:bf:a8:6b:03:7e:02:cc:bd:
                    fa:d8:16:8b:1b:bd:fd:5a:0f:2b:7f:40:8d:30:bc:
                    f6:2e:f6:db:53:db:ad:9b:d2:18:25:e9:f6:b7:64:
                    fb:e7:56:d6:ed:84:16:19:02:6d:fc:0d:31:41:94:
                    b7:ef:38:12:6c:a5:69:09:f6:66:1a:5f:79:9b:48:
                    92:e6:95:11:c1:b1:b1:fe:08:30:4e:74:52:87:d1:
                    a9:ea:f4:4e:33:37:08:39:41:b6:fe:31:80:58:72:
                    01:53:c5:84:7e:40:4a:42:05:d8:2d:b5:f2:eb:c7:
                    a6:fd:a2:54:5c:d4:01:a1:e5:e4:99:9d:28:6a:60:
                    ea:75:af:17:95:02:4b:94:d9:65:58:9a:fc:e6:a6:
                    99:51:15:f5:9a:79:79:9e:a6:5f:89:b3:73:b1:a6:
                    21:38:39:b7:c7:69:33:01:6b:18:93:30:4d:e1:cd:
                    b4:8d:78:f9:cb:e1:07:77:39:b3:d0:d9:1e:ff:b1:
                    7f:a6:2e:7f:87:91:87:5f:6c:37:df:c0:a7:82:49:
                    84:a9:f0:3c:01:0e:65:d1:06:c6:79:fb:e1:9b:4f:
                    59:b6:61:8e:c8:ea:69:49:05:7f:8f:60:b1:8f:65:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CA:67:6F:55:86:30:B4:45:A9:39:B9:74:28:6B:B7:80:39:AD:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:63:1a:95:9d:9e:d2:89:c1:a6:81:72:29:6c:aa:6d:a7:
         23:da:b6:c5:6c:28:e5:9a:31:3e:33:1f:71:5e:52:12:45:b7:
         0b:3e:ec:cd:75:77:35:c8:53:3b:8b:b2:a6:8f:bc:09:48:5b:
         d5:84:d4:a1:ed:c9:6d:ff:87:05:06:26:7e:59:60:e2:09:1f:
         14:4a:d8:0e:e9:2c:19:27:4f:4c:fa:a1:37:96:49:c6:c2:91:
         c2:b8:ee:80:15:a0:4c:98:e9:ec:33:43:14:ef:e1:af:7a:01:
         f5:ca:55:18:65:84:f8:94:03:52:e9:61:7d:a5:2d:b0:3e:fd:
         b6:7f:79:d3:8e:ad:3d:41:9e:98:a6:25:7b:b7:28:01:40:b1:
         81:e9:6a:54:2e:ef:ce:6e:44:4e:92:87:2c:b2:13:a5:1c:c9:
         b5:50:d9:7f:6c:e6:4d:58:74:6c:13:80:a5:27:f7:96:6a:4c:
         d3:38:82:08:18:a2:96:b1:da:d3:4f:cb:a7:35:7d:36:05:24:
         46:60:73:2d:78:7c:c3:64:bb:cc:46:a6:94:be:9e:4e:56:36:
         e4:92:e6:d5:5e:ae:db:6c:d3:3c:ee:46:e6:1c:9f:b4:ef:8c:
         ee:2a:60:8a:d7:5f:7e:63:02:7f:d7:60:90:9d:e9:d4:38:1c:
         49:df:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:41:38 2025 by rpki-client