Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d124d6cc-88bb-3c61-9f68-1cc8ec3a0a02.roa
File:                     d124d6cc-88bb-3c61-9f68-1cc8ec3a0a02.roa (raw, json)
Hash identifier:          hfbW49iMW7IvtoOjM9QKvqMNPZ8OQHpxXpVZEGbq76g=
Subject key identifier:   E7:71:4D:B8:6E:50:BD:5F:DB:58:31:98:D7:7D:60:C6:F4:E9:A0:16
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B758C97A72F4C189197BFD980
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d124d6cc-88bb-3c61-9f68-1cc8ec3a0a02.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     55246
IP address blocks:        162.255.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:97:a7:2f:4c:18:91:97:bf:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=13282fd7-f450-4418-b825-eeebd2938f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:8a:9d:04:37:56:63:fd:bd:92:7c:18:d9:
                    28:66:39:f5:2f:1c:78:2f:ae:c9:cc:d3:99:f8:16:
                    18:e3:62:e1:f9:de:8a:ca:37:25:f0:e2:60:93:ee:
                    d2:af:5e:58:e7:b8:80:3f:55:12:2c:62:0e:77:be:
                    41:fa:7b:19:c1:e4:17:77:92:f7:d2:6f:a7:d5:a7:
                    bf:64:5c:4b:56:34:18:ac:d6:7e:5d:ca:dd:c7:ac:
                    d4:79:3f:b1:26:ac:d8:70:42:ef:b4:65:b5:73:66:
                    5e:48:59:be:fd:fb:11:e8:b1:32:25:9c:87:1e:ff:
                    5e:65:af:90:cf:ab:24:b5:c2:37:f7:e2:5b:68:43:
                    7b:98:83:97:13:e8:1d:ee:d5:64:78:d1:e5:35:8b:
                    6b:17:4d:8f:b3:17:05:59:a9:f0:a9:01:5b:f3:be:
                    a8:c9:31:5d:db:df:29:af:ad:f8:52:3d:b0:49:56:
                    ad:fe:df:2c:8b:ee:59:8a:34:08:45:9a:ca:76:b3:
                    51:ca:0f:c0:42:7e:73:f6:8a:6f:2e:ef:b1:c2:05:
                    59:47:59:4c:1a:73:b0:c6:8a:f1:3e:af:03:85:19:
                    97:ce:c6:0e:97:41:af:f5:78:8b:0e:32:a6:cc:8e:
                    96:02:f0:78:a9:19:c9:d2:77:32:8d:a8:51:6f:26:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:4D:B8:6E:50:BD:5F:DB:58:31:98:D7:7D:60:C6:F4:E9:A0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d124d6cc-88bb-3c61-9f68-1cc8ec3a0a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:c8:00:cc:81:e7:46:ac:0e:58:6b:d3:ae:8f:38:f4:64:
         0e:d7:89:f3:ea:fe:2c:17:23:d9:ed:95:4b:2c:33:f4:63:ee:
         2c:e8:74:9a:bf:22:a6:89:61:66:9e:29:14:69:a3:21:c7:6e:
         e6:21:c5:8b:ff:04:8f:8f:49:d0:15:a5:c0:63:e4:4c:ce:b1:
         80:05:8b:a9:b5:d4:05:2c:a2:8b:1e:b8:34:17:a9:55:68:ac:
         51:03:0a:df:2b:d1:b9:95:07:01:d0:97:89:bc:4c:88:cc:6a:
         75:e5:36:32:04:11:be:6d:48:5f:c8:79:0f:f3:84:6d:de:76:
         b2:94:fc:4d:18:5f:b2:dd:ac:02:ce:d6:73:cb:ad:a1:20:00:
         ff:0b:44:53:3d:26:da:52:75:c6:2e:d1:f3:e8:5c:88:c2:97:
         b9:6b:4a:d9:54:b9:bf:95:02:c7:4c:72:fe:ff:1f:f4:b4:c2:
         d5:4a:55:20:8c:6b:67:d0:da:96:01:ab:8b:71:8f:00:de:30:
         dd:10:d0:8a:d6:31:93:58:9a:06:b0:0a:07:a2:44:8d:ae:01:
         0e:80:a0:55:23:bc:1a:15:1a:e7:8d:91:78:b1:f8:83:13:ac:
         b9:29:7b:e3:88:81:da:75:45:75:07:ff:11:1e:52:9d:ee:da:
         01:1a:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:36 2025 by rpki-client