Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/83e172ca-8310-3b63-acfb-ab5976d637a6.roa
File:                     83e172ca-8310-3b63-acfb-ab5976d637a6.roa (raw, json)
Hash identifier:          /irqrQqj51yfE3Lmdd1Oe4umyfbVsUli8BoCERhDr1k=
Subject key identifier:   D5:AA:65:10:3A:90:60:29:63:75:82:B5:AA:39:F3:A7:C1:2A:FB:C3
Certificate issuer:       /CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
Certificate serial:       010D0C9F4328584B8EACE03D3CEE862C9D74DD80
Authority key identifier: 31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/83e172ca-8310-3b63-acfb-ab5976d637a6.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     210008
IP address blocks:        64.226.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e0:3d:3c:ee:86:2c:9d:74:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=1caef789-b027-47ab-8c8d-0703dbe9194a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:a6:d1:b0:f9:95:52:a4:85:83:7e:1c:87:
                    40:79:17:ba:19:15:cf:d1:1a:e5:16:0f:72:ee:28:
                    e0:c8:36:82:26:2c:2a:64:a2:49:7f:ad:94:1a:3e:
                    ed:6b:5e:c4:19:0e:0e:41:1e:10:11:b2:1a:30:fe:
                    57:7a:6e:29:03:32:10:f6:29:64:9b:db:f8:39:86:
                    80:85:5b:de:8f:bf:99:00:89:a8:1a:91:c7:4a:fb:
                    7d:bc:84:db:1b:e8:77:d9:5b:15:f9:ee:4c:e5:2d:
                    42:6e:33:c5:65:fa:45:cd:48:97:74:bb:dd:4b:bb:
                    69:25:1c:a2:5a:19:ef:99:bb:ab:34:4a:eb:28:26:
                    1c:4b:06:39:ec:1f:74:a8:f4:f6:b1:36:56:87:95:
                    0a:aa:5d:34:c8:bf:c7:08:13:6b:b8:26:fa:c3:91:
                    b2:cb:57:ef:7b:e5:61:8d:15:49:cd:e4:e8:3c:1b:
                    b9:e1:83:df:a7:93:cc:0c:95:fc:30:45:71:7a:49:
                    3a:e6:ad:bd:42:27:9a:bb:e6:88:35:a4:77:d5:2b:
                    ce:ff:4c:3a:99:f0:90:4b:07:a6:6e:d2:34:7c:e1:
                    eb:be:c5:a6:00:f8:3c:e3:dd:09:7d:0d:91:8b:fb:
                    18:82:91:50:7f:ac:97:a9:fc:89:06:ce:9c:bf:d7:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AA:65:10:3A:90:60:29:63:75:82:B5:AA:39:F3:A7:C1:2A:FB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/83e172ca-8310-3b63-acfb-ab5976d637a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl

            X509v3 Authority Key Identifier:
                keyid:31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:19:2d:13:a0:f2:b1:6a:62:58:3f:30:7f:dd:02:ee:30:
         ce:ca:75:99:f6:07:39:36:4a:77:b8:03:04:b3:b1:d7:9b:b9:
         27:d8:93:8b:46:f9:e3:68:61:bd:4f:d6:90:f2:d6:de:f1:0c:
         d9:60:84:3f:ea:b8:dc:2d:1b:2d:04:4e:6d:4d:05:ee:a6:06:
         80:42:85:f9:96:9d:48:a8:3b:ab:cd:06:b6:b6:4d:df:1b:c6:
         79:a9:e3:0a:2f:df:4d:56:ec:3e:1b:ef:ab:f8:e3:74:fa:7b:
         aa:f8:38:87:de:17:71:56:df:ae:e3:9c:47:30:15:5a:1c:30:
         7a:b7:9c:0d:cf:f3:68:72:4b:0a:65:ef:d5:4c:23:9e:4d:a5:
         d4:af:a4:07:4c:77:20:aa:64:77:c2:2a:18:6d:c2:d8:e9:ae:
         1c:f0:2b:ca:c4:92:0f:ff:6e:91:28:5f:ba:a3:19:5d:01:2a:
         af:d0:a9:b2:29:08:33:a8:69:d2:f1:86:1d:12:d7:b8:f2:98:
         a5:3f:62:55:c7:2c:97:b6:f6:fe:db:79:c2:96:51:a5:71:6a:
         00:7e:e6:41:06:db:c5:da:de:f1:70:c5:cf:f6:e1:b1:b2:1f:
         5b:92:99:5e:9a:d2:fa:50:fe:91:66:db:fb:a6:25:51:9f:82:
         af:31:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:26:00 2025 by rpki-client