Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
File:                     7927bc7e-536c-3911-98e6-461025c15152.roa (raw, json)
Hash identifier:          504GZ05l2I1SKFbCBWX9M8RhWhOHUHBK7amHlGQ24AY=
Subject key identifier:   B3:39:F3:07:AD:B8:9B:D8:A6:9D:C4:96:ED:B1:DA:8E:4E:5C:22:24
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584B92DCEAE5AFDCF2063709C400
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     14499
IP address blocks:        142.192.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ea:e5:af:dc:f2:06:37:09:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=8495b758-b784-4a16-b1b6-91b22bb0fdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:bf:22:bd:72:26:dd:17:d0:3f:c5:54:d5:
                    25:7f:5b:ce:b8:66:9c:bb:40:c9:9d:29:99:94:b3:
                    ec:3a:6b:e1:e9:0c:c8:05:88:28:63:68:f6:d1:3f:
                    2c:16:ec:e6:de:21:3c:98:eb:9b:a0:54:53:bf:a0:
                    bb:00:59:7c:66:4a:f0:e2:e8:6b:0c:21:4f:08:72:
                    65:08:0c:fe:27:86:10:e0:93:51:16:19:61:37:7f:
                    b8:e8:56:b3:5f:6b:1c:74:b2:dc:86:82:3a:fe:ad:
                    1a:dd:84:d9:fc:6e:4c:26:01:e2:f9:78:54:61:2b:
                    b5:9b:02:ba:7c:60:e7:77:32:ac:8a:bf:9d:d0:e9:
                    97:ad:d9:2c:ab:91:3a:b0:5a:af:0c:e0:6b:b2:76:
                    e8:90:fc:6f:cb:14:e4:2e:37:f2:01:70:bb:da:60:
                    66:83:ed:b1:33:fa:be:d4:ec:fe:fe:25:c7:84:b4:
                    34:30:de:57:c3:f7:4f:cd:aa:fe:df:0c:c9:c2:4d:
                    cb:b4:4a:2c:d8:c4:0b:37:ac:ca:24:f5:ff:1c:55:
                    02:8e:13:4a:fd:ef:c9:d5:b9:11:ae:5b:33:15:c1:
                    3e:ec:4f:bf:ca:4d:53:ca:f1:33:44:21:fe:1b:77:
                    50:8c:c2:71:9c:22:b2:c5:2b:d4:0f:75:8b:72:60:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:F3:07:AD:B8:9B:D8:A6:9D:C4:96:ED:B1:DA:8E:4E:5C:22:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:52:d9:eb:6e:3f:fb:31:71:61:f0:83:d7:c6:cc:1f:32:
         0f:c3:ed:6f:82:16:df:ff:bb:e7:e4:c7:41:72:e5:47:27:bb:
         d6:fd:c3:78:f5:ed:f4:8f:70:18:17:59:17:5e:d0:a5:ec:4c:
         b0:e7:5f:51:4b:38:a5:dc:d8:fe:2b:ed:78:10:9b:0c:86:a9:
         34:24:83:d2:06:db:e6:7b:c3:48:58:8a:8e:97:d5:ee:d9:83:
         3f:d9:7a:28:9b:a2:97:f2:15:de:8e:ae:cc:d1:24:ae:46:0b:
         4b:37:3b:9e:bd:85:75:c7:53:87:cf:8f:9d:b9:81:9b:05:10:
         a9:ea:7f:83:91:dc:b2:01:72:94:97:8e:3d:1d:5e:25:1f:bd:
         e3:9c:75:c5:33:ce:8e:10:49:c3:4f:c7:6d:b2:d6:62:69:be:
         69:71:af:ed:78:de:c6:29:a3:66:48:02:fc:27:37:dc:ef:85:
         73:7d:29:e3:38:dc:16:33:3d:b9:c6:26:5a:84:d7:b0:dc:53:
         8d:e0:5d:a9:1b:f0:c6:67:94:9a:3c:e9:3d:bb:e0:f7:5c:af:
         59:e0:b7:eb:3e:e4:f2:e7:82:e9:62:fe:8a:f6:3c:40:44:cf:
         82:a8:5c:03:44:6a:dd:fe:29:e6:5a:d2:47:d3:34:a7:a9:c4:
         9c:33:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:14 2025 by rpki-client