Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa
File:                     f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa (raw, json)
Hash identifier:          CTsV7PhWReDYedLVWUtd66Yj+XNl86hHA0GZEvPNeaU=
Subject key identifier:   5B:4E:10:92:A2:8D:F9:EA:92:BA:D7:88:9B:5E:53:2D:DF:25:4A:DB
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584B48E1BDB40CB79529A9567A80
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        192.103.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:bd:b4:0c:b7:95:29:a9:56:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=25c38c43-becd-47c7-9c83-c84fe6d422b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:1f:ed:72:56:0b:85:78:8c:2d:c6:76:33:
                    b0:90:e9:90:86:cc:95:99:de:8b:ca:41:a7:d2:63:
                    6d:f4:f8:ae:6e:37:5f:7c:55:3a:34:b2:20:b8:34:
                    81:9e:67:dd:a5:12:b3:d8:71:65:42:5f:71:2b:20:
                    9b:66:05:6c:f2:8c:4f:ee:f5:1f:54:9a:f3:11:22:
                    25:22:3b:ae:6f:19:71:8e:d3:45:26:27:db:14:37:
                    c0:30:0b:03:09:1f:bd:46:09:51:09:b3:39:0c:db:
                    6d:9d:a3:41:5d:32:dd:03:00:5d:cc:75:32:ee:cf:
                    f1:2d:14:91:6a:82:92:c8:49:5d:f3:68:c9:f0:b1:
                    38:01:f3:a5:c3:c1:0a:1a:1b:15:cc:03:bc:f3:bc:
                    5d:80:29:31:7d:71:1a:cf:1a:04:17:46:11:e8:d5:
                    a6:2e:27:e1:c3:b6:8b:e9:ca:34:d8:b2:99:e8:c8:
                    7c:8c:2b:b9:22:76:36:b8:22:1f:2c:6a:18:91:5a:
                    a8:0f:0f:85:e8:9a:85:31:a6:62:9e:5b:17:e5:de:
                    10:4f:a2:1a:21:34:eb:a5:fc:7f:99:fe:cc:d5:0b:
                    24:34:d5:ca:f0:6f:74:2c:b6:fb:90:07:db:2c:1d:
                    19:e3:64:98:0a:7c:f9:43:8b:cb:97:fe:78:3a:55:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4E:10:92:A2:8D:F9:EA:92:BA:D7:88:9B:5E:53:2D:DF:25:4A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:41:19:3e:cf:5c:f4:93:14:5c:71:08:01:90:39:d3:94:
         07:51:d1:24:fe:c7:5f:97:fc:77:0d:09:61:be:f3:52:3a:89:
         07:5f:f2:0f:c3:18:b4:ab:44:03:f3:77:f7:8b:1d:a3:dd:c7:
         f2:12:a8:60:10:c4:f1:3b:01:b3:5d:25:22:31:c3:ec:93:74:
         68:f1:4d:4d:72:53:8f:a4:4a:6d:49:fa:e9:68:98:e9:02:ed:
         65:3d:43:cd:be:ac:92:e1:e2:a1:b2:a3:5a:f5:06:0a:d3:5f:
         71:ca:ed:36:13:fc:b2:1b:4c:3c:6e:bb:46:76:90:3a:61:61:
         7a:f1:55:79:35:c6:44:a3:7b:ff:fb:b8:fe:49:be:10:f0:51:
         c4:98:81:9e:d0:87:59:0e:00:77:3c:cf:bf:f2:29:d2:95:2a:
         9c:7b:f9:7a:10:65:84:98:1d:1d:e9:1b:16:4b:78:8b:16:ab:
         3b:b6:b1:a0:89:13:1e:31:5f:ca:76:59:1c:d8:d8:3b:e9:29:
         86:fe:08:3c:ea:73:d6:88:a6:28:81:d5:5b:fb:b7:2d:15:d4:
         b4:c8:40:c3:07:ab:04:a0:94:68:6b:70:af:45:7b:12:6a:b3:
         18:2e:0d:45:34:ba:95:1a:63:c8:40:18:29:b3:c0:ce:28:56:
         05:99:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:25 2025 by rpki-client