Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
File:                     9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa (raw, json)
Hash identifier:          w/NSOTlaMeQp/zYHva1E4d6hMZnF7C/k6Wh/eTBNJYw=
Subject key identifier:   DE:D7:23:65:18:4B:5C:D1:4B:5F:7B:C3:8B:E1:3B:98:C8:EF:41:51
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584B5B074976196200D00BCAB480
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     23341
IP address blocks:        143.55.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:49:76:19:62:00:d0:0b:ca:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=d4e34cbd-7645-48d8-8613-17cb82e6ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:a2:b5:1d:e6:da:d9:1b:93:17:66:4a:c4:
                    38:f1:f9:bc:23:a6:f5:d2:6a:27:4d:23:9e:61:41:
                    5e:6d:cb:57:8d:0f:41:3c:5f:6d:62:b3:7c:70:d5:
                    1c:e7:be:2b:4f:21:94:9d:97:4b:58:c8:0c:e6:49:
                    69:ba:13:8a:88:90:3a:00:4b:fa:65:8b:86:b4:06:
                    bf:59:54:2a:f6:a9:e5:0d:9a:a0:79:6a:8f:fc:2e:
                    04:86:d7:37:67:82:52:8c:29:9b:7b:ff:cc:10:26:
                    6c:2d:46:c6:42:81:98:02:74:e9:da:03:b6:c7:07:
                    bc:99:af:d5:bf:fd:12:65:98:cc:b3:27:b0:ac:8c:
                    26:d4:9b:46:5e:c5:a4:4d:0c:3f:27:8e:9b:4b:bd:
                    c1:ef:36:60:e3:4a:07:06:c0:9f:be:7b:67:a6:5b:
                    a4:2b:46:98:21:d9:83:b7:f5:2f:7d:9b:2c:38:6a:
                    1a:64:85:66:3f:2c:d5:de:75:f3:1a:27:54:21:65:
                    1d:2c:26:37:0c:af:2c:60:2a:1b:00:e1:b4:90:d8:
                    fd:1e:7c:0a:43:3e:a0:ad:95:fe:11:ed:2e:34:22:
                    c2:a3:17:44:64:61:4b:45:c6:81:7e:03:48:52:1d:
                    0e:93:1d:c7:d6:93:95:07:ee:11:35:36:f8:e8:73:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:23:65:18:4B:5C:D1:4B:5F:7B:C3:8B:E1:3B:98:C8:EF:41:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:c3:85:c2:be:da:a9:ce:c4:45:f7:e2:05:60:65:d4:47:
         48:97:68:6a:7a:5f:aa:a8:46:6a:1f:33:14:02:22:01:bb:c6:
         af:dd:6f:7e:e9:e5:5c:49:91:c5:e7:9e:ff:60:53:c4:00:11:
         f3:0e:4c:fa:f3:7c:b4:82:05:d9:7a:37:af:e2:71:83:76:4c:
         0e:c2:ec:51:f2:c5:be:79:7a:7f:c4:58:b9:a4:de:07:a3:07:
         5e:05:33:71:cb:7c:e4:fb:97:63:d2:34:17:df:b1:81:3a:72:
         74:46:60:4c:3b:13:b4:05:48:25:c6:62:bc:4f:b3:60:dc:ca:
         33:08:fb:48:ed:04:7b:96:8e:b4:d0:b5:13:73:4c:3e:6c:40:
         7d:9b:11:0b:b8:d4:d0:6b:fd:6d:87:21:1e:7c:4a:c7:f2:95:
         15:c0:c7:d3:9a:77:52:e6:63:8d:cf:3d:23:3b:92:56:b1:00:
         e0:75:4f:8a:c4:d1:1f:29:59:88:72:f0:df:86:e9:fe:80:65:
         88:06:97:24:ee:c8:f6:2e:f4:c0:fe:fe:d7:b7:48:95:e0:e4:
         56:a3:cc:ec:de:b6:28:5f:37:ef:76:20:01:71:7b:8f:fe:c3:
         40:ad:70:52:06:70:35:5a:3d:5f:82:f5:6c:9b:7d:98:0e:68:
         29:2d:b9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:37:32 2025 by rpki-client