Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa
File:                     ea634f65-8078-3511-abbf-238bf529bd3a.roa (raw, json)
Hash identifier:          GwYP4Vydxb2lHGgrLBWN+WHVh0JZ32EE7bLYtf4PnME=
Subject key identifier:   29:AD:6E:6B:AC:9A:28:D1:87:6C:45:14:E4:F2:11:66:69:1D:57:E2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B41E737A7A9F4BD50DCDA3C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     396591
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:37:a7:a9:f4:bd:50:dc:da:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=7d093068-1d4f-46ee-9846-da04f65c2069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:36:95:cb:24:e5:51:e5:25:2c:ea:a2:21:
                    b2:db:da:6e:f5:77:58:51:3b:88:8d:d6:a9:fe:db:
                    a5:34:69:bc:58:36:36:86:3f:bd:81:cc:22:59:3a:
                    af:d5:57:8d:93:a0:f6:9b:91:07:9c:4a:60:5c:d5:
                    cc:c1:85:cb:a6:df:f2:28:b2:87:8c:a4:2b:14:ba:
                    ef:42:e9:58:98:ac:13:78:c4:65:c5:e0:f7:6c:a2:
                    94:dc:bc:5a:48:af:2c:7e:e9:0d:9b:b8:96:51:ef:
                    57:90:6a:b1:35:88:50:12:6c:4f:35:b5:2a:a0:ff:
                    90:63:fb:db:21:43:38:99:cd:a2:cd:05:16:e4:a0:
                    dd:6a:5a:0d:74:60:44:3f:03:6b:33:be:6a:c2:3d:
                    8a:f9:c5:92:e1:25:f3:b5:60:74:af:30:6b:2d:b0:
                    01:76:43:d9:85:4b:f9:c5:0f:e4:ab:03:55:93:29:
                    0a:60:de:f8:ec:6f:a4:18:fd:53:22:08:1f:c7:89:
                    74:ec:5a:88:6c:ca:db:2e:3f:dd:18:d2:b6:b9:fd:
                    66:1d:8d:92:c8:2f:22:0a:af:35:a2:36:68:97:cb:
                    92:d6:e1:bf:79:e5:62:a5:ef:26:83:32:2e:e1:52:
                    18:7f:a8:62:f4:a1:c3:3b:50:f8:d2:48:80:0a:62:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AD:6E:6B:AC:9A:28:D1:87:6C:45:14:E4:F2:11:66:69:1D:57:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:01:71:d0:3e:4e:3b:e9:26:39:95:6e:e2:f1:2c:fd:6a:3a:
         16:1d:3a:26:ea:10:a3:e1:a0:1e:97:a2:05:11:9f:d9:77:12:
         c1:bb:4e:69:b6:57:ac:5d:58:59:b8:e9:1d:51:9f:6c:79:5e:
         3a:17:ed:b6:50:ce:00:79:20:eb:7a:d9:cc:12:a0:b6:fb:18:
         c8:56:87:15:f4:ba:70:da:b3:51:cd:35:08:1b:d9:c0:29:ff:
         3f:ac:2d:ee:15:c1:0a:b5:a7:5d:87:b2:c3:ba:a0:d5:77:b1:
         8b:a3:43:81:b6:9f:3d:f1:99:86:6e:c3:b1:30:83:4a:61:7d:
         25:85:83:5f:53:8f:1b:74:89:25:30:ab:73:6e:08:8b:76:44:
         40:b8:58:b2:1d:61:44:c0:b9:22:48:82:b4:04:78:a9:1c:a8:
         92:6b:bf:1d:73:ca:27:2b:23:5b:b6:ea:1f:44:c6:12:d7:c2:
         94:6e:ac:e4:d7:56:66:bf:ad:a7:ba:83:3c:7a:60:bd:de:94:
         d2:9f:73:87:79:1a:89:fb:6c:17:ad:f0:f1:7f:b2:51:af:78:
         5d:e8:48:18:37:cc:5b:5f:17:6b:2a:74:17:89:d8:2d:a5:93:
         b3:ed:ac:49:41:7e:6b:97:53:50:99:07:2d:46:40:ae:b9:80:
         46:71:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:15 2025 by rpki-client