Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa
File:                     88b5e838-17e5-3bb7-a470-56d17a1746b6.roa (raw, json)
Hash identifier:          ixXd/AfMA02OTEsHxyvjzdTwOiKO2vw8MprwwkuI06s=
Subject key identifier:   94:E4:A7:14:A7:8F:1D:E9:43:11:E9:50:5B:37:63:A2:C7:3B:CF:2A
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B52A750FE29EF1E87EE463800
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     19886
IP address blocks:        171.162.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:50:fe:29:ef:1e:87:ee:46:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=7f628fb9-8d68-4592-b422-acbf757029e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:85:0b:d8:88:d6:d2:2b:82:0c:13:00:4d:
                    5f:5e:85:b8:7f:cb:0a:cd:24:c4:54:7e:35:1b:ed:
                    7c:40:1d:9f:84:2d:a7:43:88:90:7f:59:f3:89:37:
                    eb:e0:14:da:2f:7b:cf:8e:da:a2:ce:dc:9f:eb:df:
                    3e:f1:00:c4:0c:76:87:ab:41:eb:66:e4:c4:4f:0b:
                    b0:b1:40:dc:75:1b:bd:97:43:39:8b:92:07:a5:bc:
                    5e:1b:33:ae:56:7c:35:03:ba:f2:dd:eb:fc:07:e6:
                    c7:6b:a5:68:dd:fc:5b:a0:36:96:ab:d0:02:a9:24:
                    d1:4c:db:da:8d:8a:a2:8c:aa:40:28:ba:d8:26:34:
                    ff:cb:e0:9a:b1:aa:ea:50:ee:cb:0f:82:02:2a:5a:
                    43:19:a5:c0:af:8a:e4:cf:fc:95:d8:35:e3:e6:22:
                    9d:2a:92:a8:94:26:65:82:41:01:24:73:0d:f3:9d:
                    c0:11:19:f3:d6:28:5a:a1:bc:60:c4:d9:98:5d:80:
                    eb:e0:b6:a9:5f:70:b7:13:77:30:68:0b:fd:0c:2d:
                    6c:ec:41:43:b0:8c:ae:35:5d:9c:56:fd:4b:b4:f7:
                    ed:c2:40:2f:8c:05:ac:c6:84:23:03:8f:83:fd:8f:
                    dc:9f:6d:33:5f:85:4d:d2:0d:29:2a:c2:eb:49:e8:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:A7:14:A7:8F:1D:E9:43:11:E9:50:5B:37:63:A2:C7:3B:CF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88b5e838-17e5-3bb7-a470-56d17a1746b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:98:81:b7:2d:51:94:1e:8b:76:f4:8d:96:6e:61:78:e1:9b:
         78:a6:f7:26:22:78:38:42:8f:83:69:13:5b:a1:49:29:4f:d6:
         e3:db:6c:5a:c5:d6:f7:ef:8c:38:b9:23:f7:da:14:77:69:84:
         01:cb:f8:ee:bb:a9:78:cd:50:d8:23:b9:23:72:27:af:53:ed:
         fb:33:7e:94:2f:9b:92:98:22:44:92:08:9e:c4:5d:b5:12:2d:
         ee:e1:c6:7a:3b:39:c9:f3:05:47:81:f1:06:e1:fb:f5:16:67:
         4e:68:3a:e4:1b:c1:e4:2e:26:2d:97:c2:07:ba:7e:e4:e2:52:
         38:a9:2b:cb:91:91:24:d7:8a:05:1f:73:28:41:15:a7:e0:e2:
         da:1c:df:b5:2c:09:cd:de:12:18:89:fc:48:85:74:6f:3d:cb:
         9b:5c:f2:50:43:4f:b8:bf:42:99:a4:19:62:41:6f:81:05:3d:
         86:e5:f1:df:89:e9:2e:92:43:fb:66:3c:86:ed:60:2e:a9:dd:
         f8:87:f8:e5:32:b0:3f:77:ad:ab:be:b6:12:f1:41:d4:23:bb:
         20:dc:02:db:00:63:5e:04:da:1a:1d:53:42:6d:cd:b1:dc:b1:
         af:57:b1:d1:9d:84:84:9d:9a:33:dc:19:ad:25:f3:6e:d3:94:
         7e:19:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:12 2025 by rpki-client