Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/1415e32b-17bb-3b1a-a001-26df097a32db.roa
File:                     1415e32b-17bb-3b1a-a001-26df097a32db.roa (raw, json)
Hash identifier:          PPKuwFRvbyy+7zhaSjhni1wgLiHvwFOf6uBTFo11ffU=
Subject key identifier:   A6:EF:7C:92:EE:06:63:7B:8F:A6:5F:7B:E4:A5:B9:FA:F2:EF:2F:93
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584B87B22117949289A08CF55550
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/1415e32b-17bb-3b1a-a001-26df097a32db.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        144.81.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:21:17:94:92:89:a0:8c:f5:55:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=570c27ba-fc74-460f-9f16-65a9c3072b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:e3:55:1d:d8:73:33:ea:32:c9:45:48:e0:
                    9a:9a:98:da:e0:a7:59:03:07:8e:06:b9:b8:cb:be:
                    7e:14:0c:88:e1:6f:5e:8c:b0:e2:4a:40:f9:8a:39:
                    0d:ec:31:19:49:92:c6:d4:c9:78:8f:ee:e5:3e:05:
                    f3:fc:f5:1d:6f:cf:e8:c7:88:e2:cd:97:81:48:ea:
                    76:5b:0e:02:fb:dc:64:52:4c:d9:2b:4a:2e:87:1a:
                    ca:27:96:63:b1:7c:9b:00:82:5f:ed:bc:1a:a2:02:
                    ca:ee:0b:50:25:52:3b:6c:c0:d1:72:f3:78:13:31:
                    74:87:41:0a:ec:55:35:16:ba:19:27:30:f5:e1:af:
                    1e:fe:14:0b:a8:f8:fb:19:be:e1:33:a3:f9:eb:d2:
                    06:60:41:e4:58:67:60:33:37:2e:31:b5:d9:de:e6:
                    cc:6f:bf:ad:45:68:ef:ce:63:32:bf:06:98:ef:14:
                    8b:77:f2:54:23:18:b7:0a:da:04:ec:cf:2e:bf:a8:
                    4c:fe:44:ae:67:39:13:a2:8b:6a:2b:4a:6f:69:54:
                    4d:b1:81:05:c4:26:ce:4f:7a:ca:67:a6:8e:fc:79:
                    b7:6d:8a:95:a5:2e:ec:18:d8:3f:f1:5e:2a:6b:1b:
                    e0:20:f3:c3:dc:a0:0e:43:df:0c:6c:d0:ff:12:e3:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:7C:92:EE:06:63:7B:8F:A6:5F:7B:E4:A5:B9:FA:F2:EF:2F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/1415e32b-17bb-3b1a-a001-26df097a32db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:cf:e8:86:44:af:10:6d:c8:c3:06:36:cd:19:69:a6:76:
         38:ef:e8:f7:cc:bc:0d:c7:2b:ab:15:3f:8f:47:0c:f6:5b:1f:
         cc:58:bc:8e:e8:86:5f:d5:b0:f5:26:ab:22:14:98:dd:99:1b:
         60:97:4e:97:f5:54:96:e9:43:72:80:ed:ef:d3:8f:56:1b:01:
         1c:3c:1d:71:fd:cf:3e:56:dd:63:6d:70:f9:27:a4:6f:a4:1a:
         bf:7d:ec:d4:35:72:c7:85:fd:e5:08:27:c9:7f:c0:ef:ce:00:
         06:97:f3:8a:f3:43:8c:2d:66:eb:9b:4c:10:cf:61:f8:89:84:
         f7:c0:18:b2:54:94:7a:35:b3:2c:b1:00:2c:db:4c:77:9a:6d:
         66:a3:e7:3d:b9:c1:5a:28:63:11:2a:76:48:a9:50:d1:e8:77:
         5d:cd:03:76:4a:f7:81:04:92:0f:f4:73:94:37:d2:4a:9f:2f:
         53:9c:3d:22:7c:28:ad:2e:5a:57:e8:d2:05:98:21:ad:ef:96:
         e6:5b:bd:bd:a1:fe:5c:81:15:93:df:26:d4:7a:0b:f0:8c:37:
         48:89:59:40:03:f1:1a:21:70:32:04:ad:a9:33:82:be:67:5f:
         b6:d8:1d:18:c2:63:5a:84:82:f7:5f:89:c4:c4:3d:0a:4a:d7:
         bb:f3:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:29 2025 by rpki-client