Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/e5cc9fea-f9bb-381c-8a1e-601bcc1f7c54.roa
File:                     e5cc9fea-f9bb-381c-8a1e-601bcc1f7c54.roa (raw, json)
Hash identifier:          B4jr1s6pCqG9iig2LFVcWOId0xneOYA7XMYKWjbrCfw=
Subject key identifier:   D0:6E:BE:FB:01:C3:4C:F7:6B:F7:78:96:FF:2E:38:87:8B:57:AD:F9
Certificate issuer:       /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial:       010D0C9F4328584B7B21F81DB3E772C5C1645480
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/e5cc9fea-f9bb-381c-8a1e-601bcc1f7c54.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        128.254.164.0/24 maxlen: 24
                          128.254.165.0/24 maxlen: 24
                          128.254.166.0/24 maxlen: 24
                          128.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f8:1d:b3:e7:72:c5:c1:64:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=8adbcbef-9cfc-461b-9f71-8bf1e5e10f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:04:b8:f8:44:e0:52:2f:24:05:18:80:57:79:
                    d4:ba:f4:c7:30:af:c1:91:8c:c4:b5:24:68:83:15:
                    02:5a:89:2d:fa:1c:ee:2a:ea:3b:7d:b8:bd:b9:d5:
                    52:22:03:de:89:a2:d8:37:a4:86:e0:a4:6a:e6:70:
                    a9:62:4f:5b:fc:a2:e4:47:f1:8f:d0:b8:ca:a7:c6:
                    ff:b9:32:74:56:7c:a0:5a:6d:5d:5a:6d:09:6f:41:
                    fe:1e:0c:b0:a6:de:4e:63:83:0b:80:63:c5:a7:1c:
                    8f:8e:a5:1b:ee:25:24:f7:7d:b2:78:8c:f7:50:77:
                    71:52:96:d7:21:c8:cb:98:98:ab:59:59:4f:4e:e6:
                    75:d3:61:22:4f:90:6f:1e:93:d6:7f:ce:fc:38:19:
                    fb:e8:2c:fb:8a:5e:92:53:e5:29:de:b6:75:64:f6:
                    df:0b:81:b5:3a:e7:22:e6:b8:4d:a0:c3:b5:d4:27:
                    70:69:80:a3:2f:20:b0:a9:52:39:a7:dd:cb:e7:a5:
                    47:f1:b1:a4:75:5a:a5:21:62:92:50:da:26:2c:43:
                    fc:45:16:73:06:76:12:ce:f1:5f:b8:9a:51:19:8c:
                    47:8f:87:30:c8:55:b3:05:32:0f:91:78:1d:f0:d7:
                    ac:2c:16:ca:20:3d:d1:57:33:13:29:5c:fa:0e:e4:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:BE:FB:01:C3:4C:F7:6B:F7:78:96:FF:2E:38:87:8B:57:AD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/e5cc9fea-f9bb-381c-8a1e-601bcc1f7c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:d4:0e:f6:a5:e4:39:4c:31:fb:5f:c5:c2:c5:fb:9f:b2:
         13:43:15:4f:43:71:7c:94:5e:59:00:96:7a:88:35:cb:79:44:
         1e:56:c5:74:c8:af:4b:7c:7a:47:31:4c:f2:fb:a7:e6:3d:51:
         13:b0:2b:8a:44:e3:85:0a:c9:35:8f:b7:a5:17:b9:53:60:8a:
         60:ca:fb:f0:1e:0e:8d:3d:53:55:3b:6d:ec:49:25:b8:96:40:
         19:39:9d:a8:9e:8d:20:80:ac:69:17:e0:f1:47:d7:d3:7d:96:
         43:c1:03:f0:9f:52:c0:fc:01:9b:2c:0d:d0:af:69:3c:fd:86:
         fa:8a:6a:44:08:f4:cf:50:03:92:87:cc:ea:63:04:06:17:16:
         42:3e:00:48:17:e6:34:d6:72:d8:91:39:ba:74:ab:32:ea:c9:
         56:b2:e4:92:f8:b0:60:b2:dc:f5:fa:80:cb:47:3a:79:7a:03:
         94:fb:cd:ce:54:8b:a6:66:0b:33:21:58:1e:7f:f4:b4:06:26:
         33:90:29:7d:43:c2:2e:4c:80:d8:9d:d6:b7:54:7d:a2:97:2d:
         a5:64:e7:99:a1:59:d7:d5:fb:db:70:8d:73:fb:67:ba:4b:44:
         bd:80:57:c0:99:c8:5f:89:0c:8f:54:59:d4:c9:c8:33:1e:bb:
         ae:63:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:34 2025 by rpki-client