Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
File:                     0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa (raw, json)
Hash identifier:          zutRpmasuDAQQW1eZP2EpOdBtsD6gsS3MnifpmfS78k=
Subject key identifier:   DA:95:7E:B5:E4:54:48:6F:57:FF:55:09:1D:59:B7:95:02:DF:19:77
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B758C97D4BDEFC4ED1B04C000
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     55246
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:97:d4:bd:ef:c4:ed:1b:04:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=24ae92c3-a0d6-436e-af72-c8df94b2f983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:4b:e3:16:d7:17:45:f1:30:06:d3:63:62:
                    70:c6:86:27:d1:e5:ca:3b:6c:98:89:60:61:99:85:
                    9b:2d:0b:c0:3a:db:46:b3:e8:4e:56:42:ed:ad:71:
                    c9:d6:95:c1:a8:b8:7d:c3:e2:4f:9d:8a:e0:81:03:
                    a6:04:81:52:cc:ff:b2:1c:5d:ba:9e:41:a0:79:1c:
                    e4:b7:81:c9:b0:80:a7:50:df:c2:bb:e9:86:ed:4b:
                    12:73:4f:83:c9:c6:d9:c7:0d:4a:6d:a4:2a:ba:d4:
                    02:fe:22:3f:92:c6:b0:b1:b8:ad:f6:8f:df:44:72:
                    44:9c:8c:6e:b1:9d:e4:4b:19:f1:d5:55:0c:b9:2d:
                    3b:03:33:60:95:b4:61:b4:56:1b:de:de:9b:ca:5e:
                    b8:c1:44:f3:12:e6:3f:fc:76:d5:97:cd:c8:b8:26:
                    2f:4a:01:f8:97:5a:81:de:61:a0:00:f3:80:6a:38:
                    36:58:91:ff:d9:9b:3e:df:c1:c3:8b:ad:99:ef:87:
                    51:b7:f9:e1:03:45:9a:7b:67:34:dd:95:70:fa:f9:
                    ba:85:5f:6b:41:63:55:d1:12:74:33:9c:12:ca:4f:
                    79:a0:40:45:1b:a2:ee:4a:66:9d:88:cf:bd:c2:e8:
                    31:4a:67:a3:13:13:75:a6:73:75:ad:ae:4e:46:0c:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:7E:B5:E4:54:48:6F:57:FF:55:09:1D:59:B7:95:02:DF:19:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0e1d6a1c-3769-3b4b-ae53-736e82ee5d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:01:d0:0a:48:30:45:e5:5a:bb:71:c2:74:a8:1f:2f:c1:d6:
         c3:7c:a6:36:56:82:c3:88:43:74:15:3c:af:a5:fa:2a:be:fe:
         5c:57:ab:90:ab:76:71:44:79:55:17:fb:13:be:96:af:05:39:
         fc:ba:12:22:0a:72:ab:d9:88:fc:e6:af:8c:64:39:2f:e6:1a:
         1c:cb:ff:03:ca:c9:c5:e3:33:89:d9:a9:9b:48:75:c6:fa:60:
         44:4e:c7:18:d9:13:b9:3c:a2:69:63:c3:7d:f2:23:b9:d3:1a:
         ec:72:ed:0b:eb:54:ec:81:c6:7e:36:5f:61:6a:75:64:8f:ab:
         a6:cb:25:9d:8c:66:36:75:b7:f9:39:14:c7:7b:da:06:cd:bc:
         5c:d0:72:9a:ff:91:bd:eb:e6:fc:ba:93:19:da:fd:af:d4:b6:
         e9:4a:f4:25:d6:cb:45:e6:ae:1b:dd:28:0b:df:05:f8:90:99:
         51:f9:03:db:3e:0f:04:ed:d7:b0:3e:65:c3:88:92:4e:e8:87:
         6e:55:6b:7e:af:de:86:12:a4:b4:ae:8e:0a:6c:00:84:48:40:
         87:70:13:ff:4f:91:3b:33:e2:3a:07:c6:7e:07:81:b9:44:4c:
         d6:6a:b2:78:aa:05:e8:73:cd:ca:c5:10:95:39:28:db:74:53:
         d4:1e:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:39 2025 by rpki-client