Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/b24952a6-1eda-358e-96a6-bd5525b3cf58.roa
File:                     b24952a6-1eda-358e-96a6-bd5525b3cf58.roa (raw, json)
Hash identifier:          G54m55UcLPAP0rLuoidFnmBSb1r4upfhuNrJS59Jims=
Subject key identifier:   5A:3B:A1:D1:F3:62:B8:F6:F4:6A:28:AA:97:1A:90:DB:35:EB:67:0F
Certificate issuer:       /CN=aed16f9a-e18e-4208-b0e0-80650f76a403
Certificate serial:       010D0C9F4328584B004BEBFDD2DFC46A8600F5F0
Authority key identifier: 5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/b24952a6-1eda-358e-96a6-bd5525b3cf58.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     55003
IP address blocks:        162.210.160.0/21 maxlen: 24
                          2606:f080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:eb:fd:d2:df:c4:6a:86:00:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed16f9a-e18e-4208-b0e0-80650f76a403
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=a7320123-745a-4b12-8910-06673b6f8d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:4a:3e:8a:4b:3d:cd:a1:98:ea:39:0a:09:
                    63:d3:fa:8f:c6:ad:5d:4d:68:d8:9b:9a:bf:07:db:
                    74:b1:98:dc:86:71:b1:d9:a0:f2:75:8e:1f:fa:3a:
                    35:d3:24:ec:64:66:13:7f:dd:bc:df:7f:c2:6a:bf:
                    cf:93:3b:a3:ad:2b:8e:23:0d:6e:08:d5:54:68:e3:
                    d7:66:2f:a4:ef:ce:db:ae:53:c6:65:d3:86:34:c1:
                    a4:af:a5:06:0b:fd:65:06:0f:61:bc:e1:6c:6f:17:
                    0c:23:11:45:bb:8a:ed:77:b9:56:e2:bf:5f:a2:c2:
                    88:38:58:4f:8d:d1:a6:d5:5e:e1:32:f2:81:a3:53:
                    3b:5b:c4:53:d5:bc:af:ce:10:28:d1:c1:52:63:15:
                    6c:17:c1:9c:30:b1:b3:27:cf:8b:a9:92:e3:47:de:
                    3f:fc:e1:dc:b1:79:78:40:db:b1:ce:64:f2:e2:4b:
                    d3:cb:fb:13:86:69:b8:0f:9a:ee:26:c7:72:48:3b:
                    a5:51:d1:25:dc:06:2e:a2:35:39:77:d8:d9:7a:02:
                    84:f9:bb:28:66:25:96:84:c1:1f:aa:11:db:c7:68:
                    3a:c3:d8:8b:10:87:7a:99:37:3c:f3:93:62:0e:25:
                    78:db:1c:11:43:02:a7:ed:38:90:9d:a9:13:bb:a7:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:A1:D1:F3:62:B8:F6:F4:6A:28:AA:97:1A:90:DB:35:EB:67:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/b24952a6-1eda-358e-96a6-bd5525b3cf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403/aed16f9a-e18e-4208-b0e0-80650f76a403.crl

            X509v3 Authority Key Identifier:
                keyid:5F:13:6E:CA:A7:4B:D0:BE:2F:AA:82:A5:0D:79:C6:92:7B:4A:F2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed16f9a-e18e-4208-b0e0-80650f76a403.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.160.0/21
                IPv6:
                  2606:f080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:68:5d:f6:5d:7b:f2:dc:29:a8:cd:1c:d3:18:62:59:fd:15:
         c9:e5:b1:08:a4:bb:47:01:a4:48:04:79:d9:e0:10:dd:44:0d:
         2e:bb:f2:7c:96:ce:cb:9c:ff:a1:8a:ef:95:0f:20:21:0d:f6:
         68:f9:88:a0:15:03:60:62:ca:f4:34:92:4f:ed:6b:6b:d2:b4:
         1f:c3:8f:fb:9f:43:f7:99:49:f5:ed:ee:1e:0a:2d:6d:ed:b0:
         44:bb:40:6c:52:69:95:a2:8f:b2:20:5f:47:b1:82:d9:ed:57:
         79:d9:c9:e6:51:da:21:61:c2:a5:ac:1e:f4:b0:8b:3d:e5:a0:
         42:81:78:23:ad:fe:6d:b4:5f:cb:7b:9c:6d:e1:c6:e0:17:5b:
         81:12:75:49:34:f5:f0:3c:32:02:4b:5b:59:6c:de:03:1f:bc:
         27:32:23:f5:a7:c2:40:a1:fa:bd:43:bb:4c:6c:ff:0b:c4:04:
         d6:2f:f2:f8:44:b1:b3:00:1d:8f:51:bc:be:25:b0:18:b3:17:
         20:29:f6:11:f5:19:bd:94:49:8c:7e:8b:a2:0f:e5:21:3c:3b:
         18:37:22:68:84:03:be:0e:cf:98:77:be:03:2c:84:3e:df:72:
         cc:9e:ef:26:a2:c3:54:bf:e3:89:1e:5d:73:d3:c1:5e:7f:63:
         0b:3b:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:14:59 2025 by rpki-client