Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa
File:                     d56bc9bc-e4b0-353f-9509-71cf2526717d.roa (raw, json)
Hash identifier:          HoLrqJWPkxjCWzek1xMtQWAVZtxI8gUeD7oYEwN6C78=
Subject key identifier:   2A:CE:AB:CE:D0:06:84:B1:98:CA:4F:DE:03:FA:84:5B:00:BB:B0:31
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B8EACE355C9B37E322A9E8940
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36321
IP address blocks:        64.124.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e3:55:c9:b3:7e:32:2a:9e:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=0f2d6fbe-e0ac-4a0d-a6c5-c919d5989ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:f7:49:7b:c1:a5:e0:53:7f:81:69:9e:96:
                    97:b2:2d:75:55:ba:66:0a:ea:97:de:74:ca:21:03:
                    95:40:9e:f3:bd:45:d0:99:3e:f6:0d:07:31:97:ec:
                    a3:a3:ea:51:44:d1:e6:53:ef:53:5f:eb:2a:51:c3:
                    ce:c6:a9:e5:2c:2d:fd:47:dd:58:0a:6d:8b:e9:67:
                    f7:a1:3b:e4:ca:53:1e:a0:80:7b:67:7a:7e:c4:06:
                    3d:b4:7d:e4:c9:96:03:93:41:1b:d2:a4:9c:27:7d:
                    04:83:e9:c9:12:28:c9:08:ce:44:cd:ff:e8:ea:56:
                    d3:d0:c5:30:86:af:28:c2:9e:99:5f:d6:b1:b0:76:
                    46:c3:4e:23:c7:0a:e9:9b:aa:31:b2:02:02:28:49:
                    6b:6c:05:ce:56:90:77:c6:85:3f:52:d3:a2:2b:77:
                    b2:02:42:76:f0:58:66:6b:8f:41:5c:42:c9:26:b8:
                    c8:24:56:f2:b3:fe:42:91:ad:51:b1:99:31:fb:4a:
                    bd:d0:b1:76:1f:72:9d:90:66:ab:c1:90:6d:f5:9a:
                    31:35:c9:2f:36:7f:86:b3:78:18:b7:d2:20:ec:68:
                    ae:58:c2:a6:88:e1:56:17:29:70:23:6b:c1:c1:99:
                    6d:a0:60:de:93:1a:4d:9f:78:74:ea:c1:eb:81:ee:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:AB:CE:D0:06:84:B1:98:CA:4F:DE:03:FA:84:5B:00:BB:B0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:f2:35:2e:1e:cc:80:51:38:eb:f7:c2:cd:da:6a:9b:cc:
         80:33:e0:ec:d5:a0:4d:b1:b3:7b:bb:6e:29:bd:38:76:19:eb:
         c3:c4:6d:da:d8:15:37:4b:eb:08:8e:cd:4c:46:f2:94:9c:22:
         b5:22:e7:0e:4e:60:dc:b9:32:cc:15:64:ca:c3:dc:72:a4:14:
         fc:2c:f4:0e:60:d5:d7:60:bb:9f:ec:23:f5:6a:9e:4c:cf:5d:
         6e:58:37:64:d5:93:ba:55:39:d3:1d:1b:df:c6:77:49:e6:9c:
         91:97:0f:d3:e6:ac:8c:03:86:09:59:81:94:d3:e5:06:11:07:
         e0:f3:04:45:b7:ec:24:9c:af:f2:2d:b3:78:2b:f1:c7:6a:94:
         ea:2e:d7:5d:a4:86:f0:cd:56:69:83:83:4a:9c:c8:51:21:dc:
         c5:7f:c4:e8:9d:b6:bb:9b:6c:8d:51:15:c7:9d:73:ce:48:f6:
         2d:e3:5b:ee:48:b7:e8:c0:70:7d:29:4a:c8:b8:15:2d:b2:3a:
         56:a1:c0:bc:dc:88:fe:85:2f:84:09:0d:ce:76:3e:a5:8b:59:
         53:1b:32:cc:99:d0:e5:64:78:2d:46:d6:42:09:50:c5:fc:a9:
         d5:75:8e:b4:ea:37:7a:ad:61:0a:d4:a6:61:d1:20:2e:5e:02:
         e1:5f:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:35 2025 by rpki-client