Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/218e2458-4a28-3983-99ce-325d9fcb50a9.roa
File:                     218e2458-4a28-3983-99ce-325d9fcb50a9.roa (raw, json)
Hash identifier:          nMoQ85ZuCOx8pDDBQuc8UqzIgwPDiERqWQovqdDLJdI=
Subject key identifier:   96:27:1C:25:95:79:A9:9F:A1:E7:7F:B6:A2:5D:C6:A4:F8:79:08:19
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B92DCF591E37C7DE3C8EE5500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/218e2458-4a28-3983-99ce-325d9fcb50a9.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18798
IP address blocks:        64.124.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f5:91:e3:7c:7d:e3:c8:ee:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=1b9c531d-bf92-4411-a3bc-e9099cf213fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:ed:39:63:f1:03:77:2f:70:3c:47:c2:ba:
                    9b:77:78:7a:d6:f1:ec:da:63:a2:b4:40:45:43:54:
                    5b:02:bd:9f:2c:9f:e5:86:f1:0f:43:62:29:7a:ff:
                    ef:a5:44:3d:c4:3e:32:8d:bd:1a:83:72:26:11:cc:
                    63:34:32:eb:e1:09:f8:a4:cf:06:e1:92:91:39:40:
                    6f:fa:9e:e6:06:a1:59:21:70:5e:45:9a:eb:ef:14:
                    b7:89:2b:13:52:4a:cd:f0:09:12:78:3a:93:d4:55:
                    29:b1:23:90:ce:aa:cb:19:8f:d4:20:9b:eb:3b:d4:
                    0b:3a:0d:cf:71:df:1a:3f:4d:57:d7:99:2f:2f:f0:
                    75:3b:8a:8c:13:34:46:bd:32:dd:9a:16:23:f3:e1:
                    d7:00:47:81:ae:fe:54:ad:10:42:86:17:66:aa:84:
                    5b:c8:39:0c:79:6f:16:2e:af:31:5b:fb:5f:d2:55:
                    17:c1:e1:4a:01:4b:52:8e:d7:06:43:fc:c3:29:12:
                    f9:91:ba:e6:24:a4:5d:18:fe:c1:27:be:71:27:2a:
                    d8:0b:c6:f7:92:8c:bc:17:13:0f:f5:23:db:68:ba:
                    bc:f1:50:a0:9a:f4:d2:94:31:c3:49:cc:0f:b8:6b:
                    1f:09:ff:56:dc:48:e4:09:29:cd:b4:16:d1:20:ae:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:1C:25:95:79:A9:9F:A1:E7:7F:B6:A2:5D:C6:A4:F8:79:08:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/218e2458-4a28-3983-99ce-325d9fcb50a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1c:d1:a3:7c:f9:ca:b8:78:b5:9f:2b:57:73:96:b9:e8:ec:
         2e:10:3d:b1:cc:b0:24:8c:f7:95:03:05:1f:ec:42:99:f9:38:
         ee:e3:91:54:97:fe:c7:f3:03:22:06:d3:d0:40:74:ec:7e:30:
         31:e0:9d:f4:40:de:59:52:71:c5:fd:bc:87:78:48:d9:42:05:
         6f:7f:79:48:7f:60:24:24:92:3a:42:70:ab:90:af:93:13:96:
         19:af:37:dd:1f:97:32:c8:c0:00:33:05:dd:3a:72:f5:89:93:
         c9:bd:30:cd:9d:7c:bc:d5:64:0c:87:56:b1:7e:5b:d6:cd:f1:
         99:41:a9:96:dd:24:b1:4d:39:87:06:6b:6f:74:5a:1b:9b:69:
         50:d4:bd:89:36:e3:ac:c3:82:ca:51:44:60:5f:eb:6e:6d:34:
         c0:c6:f0:a8:83:39:c5:12:0b:55:95:8f:c6:0a:92:33:73:15:
         ca:ab:31:2d:e6:10:9d:50:1f:8a:24:f3:3c:92:29:57:e0:a9:
         91:af:17:ef:67:b3:80:da:77:93:7f:fb:08:48:95:3c:db:47:
         bb:8c:88:9b:dc:4a:ba:7c:bb:a4:29:89:2a:96:56:01:a8:f9:
         fd:c2:75:51:b3:0c:8c:2e:ca:75:fb:98:08:58:1b:24:4e:4e:
         f9:db:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:33 2025 by rpki-client