Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa
File:                     e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa (raw, json)
Hash identifier:          kX+YNv9JKEpaFnyrJV07PwwcRCJEIsokR139RJqiwGA=
Subject key identifier:   0D:02:72:25:AA:33:18:86:63:AA:7A:AF:29:D4:32:C4:BF:B6:DC:FF
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584B52A777B67F06D7E8D09ADAC0
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     399660
IP address blocks:        209.51.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:77:b6:7f:06:d7:e8:d0:9a:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=0e6b372b-1acb-4cba-a374-f68c59675b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:68:80:f3:44:0b:c2:77:eb:f9:b2:ea:4b:
                    4e:b6:c3:cb:eb:c8:25:b5:ab:24:bb:7c:33:17:89:
                    e7:9a:69:69:75:50:34:87:d4:c0:46:5f:24:cc:4f:
                    c6:56:46:b1:d1:cd:5f:3d:61:9b:cb:3e:4a:0c:31:
                    78:09:7b:26:c5:a8:2c:6d:8c:61:d0:a6:56:55:e4:
                    8b:71:97:05:a4:75:8a:47:1e:05:ab:1c:50:08:15:
                    d0:09:95:51:42:4c:a1:e7:32:e5:4c:6c:a1:4e:e7:
                    43:f3:38:ee:8a:e0:39:9d:6d:43:ed:72:63:96:81:
                    fa:6c:7a:4a:ba:30:dc:05:2f:b2:0d:8a:5f:11:1f:
                    83:9d:8c:b0:23:be:fd:7a:02:c9:9d:e5:aa:a9:65:
                    a8:15:6f:ef:6a:59:01:34:44:3d:fb:53:4b:17:96:
                    66:4d:81:de:55:a6:83:e6:d2:7d:55:26:df:1e:14:
                    41:c6:f2:68:bd:3d:6e:8a:81:27:1c:a7:cd:14:b8:
                    fe:f8:51:37:29:5a:72:8e:b9:68:d1:42:5d:90:18:
                    59:e7:de:63:2b:12:e7:01:44:ae:30:e4:e3:c7:2d:
                    69:94:3f:0c:ec:3a:32:d8:41:2e:54:95:03:75:c4:
                    53:da:3b:36:e5:a1:92:fd:9b:d8:88:75:5f:41:88:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:72:25:AA:33:18:86:63:AA:7A:AF:29:D4:32:C4:BF:B6:DC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a8:13:0a:f6:3b:f3:dc:c4:16:a7:cf:4e:f5:1f:0e:7a:9e:
         fa:a0:52:99:50:3f:55:21:3b:b4:52:db:95:54:66:70:98:7f:
         1c:48:21:51:ce:50:00:bf:82:67:47:da:31:36:d2:bc:cb:47:
         4d:ab:d6:44:b9:bd:c3:73:8e:d1:90:77:5e:3e:8e:ee:39:d0:
         dc:7e:1c:f1:11:2b:b5:a5:c0:ee:7c:7d:5d:69:0a:ae:fe:af:
         b1:4b:f7:cb:56:a3:a4:79:53:b4:04:a8:93:23:74:e9:6d:1a:
         fc:79:b6:90:ca:d0:7d:d9:d8:d6:4f:fa:f4:96:fc:08:22:88:
         62:f9:31:14:af:0e:1a:ff:4c:9a:bc:18:e3:c2:c6:f5:84:0a:
         60:8d:9a:bd:f2:7c:8d:4e:10:32:a9:4f:54:93:a2:e7:fb:ea:
         4a:0d:6d:2f:57:b9:62:b6:b4:06:3b:be:ea:64:87:79:70:cc:
         8a:7b:ab:2f:c0:f0:94:25:f9:9c:7e:ac:90:0b:43:8f:90:40:
         5a:09:b7:6b:e9:e8:dd:5c:1d:59:e6:9c:5b:87:83:b7:13:6e:
         c7:84:03:d9:50:05:e0:26:b5:e5:71:c0:3a:af:66:c3:5f:88:
         39:5a:17:91:e8:c6:75:3e:23:4f:85:c7:76:98:cc:15:51:07:
         45:36:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:37 2025 by rpki-client