Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa
File:                     b0877303-3406-3332-9cef-2f93ba63c3c3.roa (raw, json)
Hash identifier:          gyNCBp7VVgzFhEn6wVTeUKIMXy22icCaWf8tSZvZiME=
Subject key identifier:   AD:84:70:10:80:AB:04:64:BD:E6:36:D6:A4:7C:1E:19:0B:8E:42:ED
Certificate issuer:       /CN=608a6439-1cee-431f-908b-dcfad7329c1d
Certificate serial:       010D0C9F4328584B92DCF67ECDBAD284DF08C100
Authority key identifier: 0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     396982
IP address blocks:        159.137.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f6:7e:cd:ba:d2:84:df:08:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608a6439-1cee-431f-908b-dcfad7329c1d
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ca177faf-2ee4-4366-a845-f85befe2e96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:4a:28:14:04:ec:55:65:7f:97:36:1f:07:
                    fb:d7:3c:04:f8:7d:1b:ce:c1:2f:30:83:d5:a3:e5:
                    62:0b:29:57:36:f7:a5:af:43:e8:0c:6b:c4:2e:78:
                    49:44:a6:20:46:66:ee:06:e0:30:1a:84:7a:d6:16:
                    00:de:97:5d:25:af:3f:96:3c:42:45:7d:fe:0e:c4:
                    4c:57:8d:ed:c9:11:2e:76:f6:63:82:f9:c6:cd:b0:
                    b9:3c:61:a6:69:e3:84:e9:aa:f0:48:59:e2:4b:81:
                    b7:4a:ad:75:3d:c2:dd:3b:ed:08:be:2c:2f:f9:14:
                    0a:af:23:7b:8c:93:26:03:f4:32:c9:af:c5:8d:21:
                    e7:9d:06:2e:eb:f6:0c:47:82:ce:cc:ea:e0:1a:8a:
                    b5:72:9a:32:2b:7e:15:54:a5:f8:ba:74:80:2c:27:
                    0b:f4:e4:20:d3:7b:4f:3c:e2:86:e1:2e:74:33:2e:
                    be:69:0f:dc:fb:f0:1a:d7:03:9f:cf:0f:e9:b7:f5:
                    52:3a:b9:0c:45:a3:67:bd:52:d4:2c:42:e0:2d:65:
                    5c:76:e1:cc:62:f2:66:5e:f8:f6:2f:8e:3e:c1:84:
                    7c:59:68:5c:04:3f:1e:78:41:be:6b:92:b8:09:7c:
                    53:9f:44:68:be:49:b8:aa:66:9e:42:91:f9:d1:f0:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:70:10:80:AB:04:64:BD:E6:36:D6:A4:7C:1E:19:0B:8E:42:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl

            X509v3 Authority Key Identifier:
                keyid:0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.137.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:bd:01:17:c7:8b:0f:ee:8a:a8:e3:fe:96:fb:4b:91:73:
         30:9c:04:7e:76:43:18:14:5c:ac:c7:ad:0d:2c:98:42:34:39:
         79:50:57:f1:c4:c1:59:92:a4:cf:a9:99:c1:9a:85:0d:f2:7a:
         3d:e4:81:c6:76:f8:3b:b9:93:97:71:29:82:2a:05:7b:c4:be:
         b8:1b:f8:ae:1c:58:69:15:fd:7d:2b:27:9c:3b:61:27:57:d6:
         6e:b0:aa:d9:a5:65:8d:48:2f:b7:90:9f:e9:82:74:05:79:bd:
         ad:3f:e2:da:82:95:1a:ac:93:48:80:39:ed:62:22:f1:a6:34:
         c8:1c:3e:eb:9f:3c:b4:48:6f:43:c7:15:79:75:94:e2:9f:27:
         42:fd:d3:96:41:19:3f:ea:5e:af:a1:97:43:91:ff:1e:dd:ff:
         33:52:3f:7f:b0:88:cd:2f:f7:3a:7e:14:a2:c8:bc:6b:5e:69:
         48:b9:55:4b:e7:42:c2:83:ab:dc:a9:f0:30:fb:ab:67:23:bd:
         dc:5a:15:ec:a6:4c:5d:95:50:9b:96:f6:62:94:62:12:d6:ae:
         ce:21:ef:f1:0c:f0:93:ea:db:eb:ae:7e:5d:1d:15:5f:96:8a:
         c9:e6:19:fa:b4:21:a5:85:8e:13:86:06:11:e5:7e:0d:33:ff:
         05:9b:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:32 2025 by rpki-client