Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7c10c352-aa33-34c3-a1c2-1dc86d3248ca.roa
File:                     7c10c352-aa33-34c3-a1c2-1dc86d3248ca.roa (raw, json)
Hash identifier:          bxv8Ffz8O1OvG7s2CF7z8CGCQ1RnAkFmD5JS3Ibe9JE=
Subject key identifier:   FA:A0:7C:35:94:63:32:5D:FD:BF:04:C4:28:D4:96:93:AA:72:1C:1E
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F4328584B76F256DCE32FCB5BB2E43800
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7c10c352-aa33-34c3-a1c2-1dc86d3248ca.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     69
IP address blocks:        128.91.139.0/24 maxlen: 24
                          165.123.50.0/24 maxlen: 24
                          192.5.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:56:dc:e3:2f:cb:5b:b2:e4:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=1d00d6f2-f3ec-4f15-b362-8679d6ba7b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:da:fe:9f:4e:5f:d5:64:f4:43:7b:36:f3:
                    a7:e7:72:19:43:5c:e2:89:f1:1d:0c:15:1a:49:d7:
                    ab:8f:f8:95:46:40:a0:60:93:04:0a:5b:f1:1e:53:
                    1d:a3:f4:b9:1d:66:05:a7:87:1d:66:80:1a:dd:1e:
                    cc:18:77:e7:75:67:df:86:6d:ad:7f:df:71:96:5f:
                    6a:f2:6e:b6:39:32:6d:c6:92:df:51:73:d5:46:3d:
                    db:bf:33:77:66:39:76:4c:a5:f9:de:ab:cd:b2:88:
                    2d:14:b5:17:4a:8b:5f:7b:4f:1f:ce:2d:53:00:6d:
                    8e:9a:d5:0b:bb:fd:d4:17:cb:9b:52:5d:19:2b:3c:
                    53:c5:17:02:81:45:e8:0d:0f:95:b1:d5:39:7f:97:
                    96:8c:91:ab:f7:ce:77:44:f3:6d:b5:ac:88:c4:6b:
                    ce:bd:26:79:c6:01:da:76:de:b9:40:8c:2a:70:4a:
                    6d:2b:a3:48:4f:db:20:2d:8e:94:84:86:8f:91:bf:
                    65:ff:cc:c8:e3:a5:12:c7:76:b6:f3:1b:9c:19:48:
                    56:20:fd:61:b2:d7:fa:89:72:f1:0d:97:c7:60:3b:
                    6e:09:c0:95:de:48:ad:b4:9c:4e:2d:1d:71:a6:ae:
                    c0:66:dd:50:a7:6a:4a:bd:c2:d6:1a:61:a5:3a:52:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:7C:35:94:63:32:5D:FD:BF:04:C4:28:D4:96:93:AA:72:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7c10c352-aa33-34c3-a1c2-1dc86d3248ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.91.139.0/24
                  165.123.50.0/24
                  192.5.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:46:d7:13:86:29:46:ae:8d:e4:30:d4:30:98:e5:cf:e9:9b:
         00:69:7e:22:51:0d:53:44:78:87:27:91:5c:e8:c4:22:91:aa:
         5f:54:be:f0:ba:0d:2d:58:f2:71:d2:bc:44:6e:db:e7:be:f8:
         8c:05:56:e7:ba:89:2d:1e:fd:3d:9c:d3:ab:6a:48:36:31:f2:
         90:70:d9:02:89:09:99:4a:73:72:00:b9:ff:a5:46:a2:a1:cc:
         61:55:57:d6:5d:96:67:ba:65:0b:32:b1:b0:c8:ea:64:6b:df:
         85:a9:4e:0a:4d:7c:1c:29:77:33:eb:88:20:4f:b8:5d:96:2d:
         11:ff:63:27:52:77:0d:3b:a1:59:2c:dd:c5:c7:c7:6a:9a:46:
         a0:1f:f1:aa:30:57:80:72:63:c1:21:2c:66:ad:fc:fb:78:68:
         80:a7:16:9b:0c:4b:b5:b4:e7:62:c7:00:a5:ef:92:9f:4b:c4:
         cf:18:c4:47:f3:1e:5f:72:63:19:b2:75:1b:f5:aa:b5:78:f3:
         3d:ba:41:a4:0d:a8:d3:d3:0f:ed:41:ff:e0:29:f1:a3:8b:04:
         61:22:13:6f:27:9d:b0:06:67:bb:e4:6f:78:7a:37:2e:54:a7:
         e7:64:c5:fa:99:fd:bf:9a:c5:ed:d8:bc:38:c3:d6:79:c6:d7:
         7e:21:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:37 2025 by rpki-client