Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12f0515c-144a-3db4-b4ed-3217007cacca.roa
File:                     12f0515c-144a-3db4-b4ed-3217007cacca.roa (raw, json)
Hash identifier:          0nAC4s5sUreD//U3nBwBVIJ0waJCESoUs/2vOw0QwRU=
Subject key identifier:   01:86:21:97:82:2E:0B:90:70:14:6A:35:3D:D7:D6:0B:D1:EC:15:7F
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A1E70B62E329DC0F3E49000
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12f0515c-144a-3db4-b4ed-3217007cacca.roa
Signing time:             Thu 16 Oct 2025 09:50:35 +0000
ROA not before:           Thu 16 Oct 2025 09:50:35 +0000
ROA not after:            Wed 14 Jan 2026 10:50:35 +0000
asID:                     14555
IP address blocks:        162.210.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:1e:70:b6:2e:32:9d:c0:f3:e4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 09:50:35 2025 GMT
            Not After : Jan 14 10:50:35 2026 GMT
        Subject: CN=657458e1-832a-499c-89bc-63f7ffd2a376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:a9:ef:b6:cf:7c:17:aa:69:16:ae:60:64:
                    da:f5:68:0c:e1:ec:8c:c1:b2:d9:dc:b9:76:fd:eb:
                    65:b8:ce:a6:a5:c4:49:60:01:1e:61:e8:ad:25:46:
                    8f:17:e6:45:81:0e:9b:f0:ef:d3:75:e4:1f:4f:31:
                    83:3c:97:7b:5c:53:bd:87:17:c4:f0:ef:78:5c:ef:
                    05:d0:e0:96:01:fe:9b:75:43:37:6e:c1:d6:dc:ea:
                    27:c5:f8:23:01:05:eb:19:31:77:48:23:2f:c5:96:
                    47:07:29:5f:f0:6c:7a:1a:a9:cd:dc:94:12:c9:c6:
                    9e:34:83:79:21:bb:1e:70:0c:9d:60:99:2b:6b:d6:
                    30:e8:cf:a6:02:77:1c:de:24:9d:1f:1a:e8:49:6b:
                    f9:8e:54:6b:0b:4e:8a:0b:db:eb:85:19:35:a5:5d:
                    cc:3f:24:8b:77:ff:79:1c:aa:1e:1a:72:fd:d0:dc:
                    10:66:af:f8:41:2f:45:6d:fa:51:8f:ea:0a:c5:86:
                    34:6e:0f:2c:90:ee:2a:b2:80:84:96:0b:d8:d6:6e:
                    c1:56:8e:c4:43:fc:db:8a:51:6a:54:15:81:1d:b6:
                    4c:ea:84:fb:1a:d9:98:b0:69:fa:f5:8f:cf:a4:af:
                    43:0a:a3:3b:db:02:a8:ad:2e:cc:44:ec:a5:e5:61:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:21:97:82:2E:0B:90:70:14:6A:35:3D:D7:D6:0B:D1:EC:15:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12f0515c-144a-3db4-b4ed-3217007cacca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:8d:b1:8a:6a:b1:f5:71:01:43:8e:8e:b1:7d:f4:6f:d0:05:
         52:34:12:f5:83:25:24:b6:e3:9f:62:5a:2c:d0:a9:30:00:2b:
         fd:22:f4:0b:60:d1:8a:c6:a6:f9:79:41:9d:6f:aa:d7:00:0e:
         9f:09:68:e8:42:e8:e5:7e:7c:ca:db:0f:a5:1e:c0:de:93:55:
         54:3a:0e:69:c1:46:2a:27:ab:ce:bc:be:fe:c8:2a:e5:50:b0:
         d1:4d:68:59:43:ad:62:fe:6c:ef:11:88:cc:f8:54:d2:33:76:
         6f:92:50:60:72:9a:74:4b:d7:08:f0:ad:36:69:05:13:9d:03:
         06:e5:b4:63:d3:4f:c3:d3:89:5c:8a:e2:26:c0:65:ba:ba:a4:
         44:bd:b6:f6:48:f1:f5:34:20:a6:de:c7:00:af:bc:6e:70:12:
         1d:1f:e8:04:5a:ec:32:75:16:90:65:44:14:78:21:f0:d1:d1:
         7e:12:a0:df:59:4f:63:79:5e:ca:b5:a3:5f:4a:15:a9:f5:2c:
         a3:eb:4a:77:c1:9b:3e:ae:66:6d:b3:e6:3c:4b:ec:fb:6b:db:
         39:b6:ed:d4:ec:bc:4d:75:38:c7:89:19:3b:1f:7b:67:bb:3f:
         47:76:bb:10:a4:da:99:55:67:40:78:52:1a:95:73:cf:0c:80:
         8a:f4:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:56:08 2025 by rpki-client