Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa
File:                     785fb15e-90d3-3366-8c08-413a5c6d616a.roa (raw, json)
Hash identifier:          0C5y9d0TLIPqfM1CveBYRFkb7UUseAoSltSv3qQcLxc=
Subject key identifier:   05:17:84:2C:36:F8:70:E7:D3:6F:B9:09:D4:A9:4D:E8:67:82:D9:54
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584B8DB268E6D518CD6916050670
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa
Signing time:             Fri 17 Oct 2025 16:36:09 +0000
ROA not before:           Fri 17 Oct 2025 16:36:09 +0000
ROA not after:            Thu 15 Jan 2026 17:36:09 +0000
asID:                     21949
IP address blocks:        173.231.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:b2:68:e6:d5:18:cd:69:16:05:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Oct 17 16:36:09 2025 GMT
            Not After : Jan 15 17:36:09 2026 GMT
        Subject: CN=36a4f5d7-5b3b-436c-8b4a-b66fd786b016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:94:dc:67:c8:88:d1:fa:ab:f6:56:c6:18:
                    dd:92:f9:91:79:0c:64:62:8e:8b:eb:2d:37:52:6e:
                    6c:3f:44:0b:b7:13:41:c7:0e:ac:77:8e:2c:03:66:
                    75:0f:90:b3:5b:14:28:aa:3f:1a:b2:ef:86:f8:21:
                    d3:53:b5:d0:10:f2:de:bf:f7:34:8a:fd:68:95:e7:
                    ba:f1:f0:20:7e:7c:73:c7:53:0b:35:7b:d6:b0:93:
                    f1:c7:b0:41:9e:54:41:ea:d9:4e:87:49:3c:40:46:
                    cb:b3:4a:2f:ca:2f:97:b0:97:6d:c3:73:23:8a:82:
                    42:80:53:1f:97:77:c0:35:86:e8:ea:e8:05:48:e9:
                    8e:76:20:5e:e7:5f:ca:99:e1:83:4e:de:87:a8:0b:
                    41:15:70:1a:47:06:74:28:4a:57:92:7f:8a:8f:75:
                    7d:f3:e0:45:2a:a2:a6:bc:c8:30:f5:c4:e7:9a:1f:
                    0e:37:6d:9f:60:a8:48:e7:ce:65:f1:86:68:9f:6c:
                    0f:4f:f6:51:79:3e:12:68:86:f0:02:59:0f:d1:a4:
                    88:40:cd:fd:78:62:3b:4b:62:d6:2c:c8:51:67:1e:
                    1c:16:c4:d5:87:50:00:ed:55:3c:03:53:16:26:bf:
                    11:5c:b3:cb:3b:56:96:b8:ff:e2:0a:e5:14:ff:99:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:84:2C:36:F8:70:E7:D3:6F:B9:09:D4:A9:4D:E8:67:82:D9:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/785fb15e-90d3-3366-8c08-413a5c6d616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cc:c3:8a:15:2d:5a:ef:f4:1b:b0:cb:6d:e5:aa:25:7a:8a:
         4d:e7:d8:ea:46:3f:34:bb:45:0c:82:fd:03:62:43:20:ad:d9:
         81:45:c9:e2:1f:94:1f:ac:c3:4e:5e:c5:22:29:cf:52:4a:fa:
         db:f9:2e:78:5e:2a:2b:29:38:5c:71:b0:3b:d3:bf:a0:dd:86:
         ae:cf:72:b8:83:98:c9:39:e4:37:e4:96:24:19:4d:8a:8a:11:
         a7:0b:08:f0:3e:80:b4:ae:f0:18:5d:3b:e7:4d:3d:98:95:2b:
         75:31:a9:6f:bb:51:4c:fa:ef:eb:95:a9:4c:90:b6:bd:c8:27:
         59:da:d5:e6:3f:7e:a2:64:f3:f5:94:bb:d4:2b:21:9e:9e:f5:
         26:dc:90:1f:02:27:a1:c8:39:2b:41:4a:94:00:e1:f4:5c:bc:
         a7:f9:57:45:b2:59:49:43:8d:b3:ce:6f:45:f5:ea:93:8d:22:
         f7:f0:73:93:b1:ef:90:d9:8f:55:b7:80:1d:44:b3:f9:d4:3f:
         7e:1e:09:ba:a8:98:45:f3:b9:d2:6c:fd:10:7e:a5:cc:97:1c:
         24:fb:56:ce:d2:4d:6e:1f:9d:ee:cd:13:16:ba:23:82:7a:51:
         a1:10:36:c7:28:91:c8:b1:98:b5:68:e3:2f:f2:f6:3e:d2:ee:
         cc:ec:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:06 2025 by rpki-client