Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa
File:                     672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json)
Hash identifier:          ioF4lVaWbQmvN3WY/Bt/fLjxnayFjes2UQccW9Dammc=
Subject key identifier:   34:6C:08:8B:32:49:B6:B5:55:60:CD:53:CD:C4:3C:83:A0:91:E1:93
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584B609C92F3E75ADFA267EEEE80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     931
IP address blocks:        128.254.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:92:f3:e7:5a:df:a2:67:ee:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=aece669e-b66e-4fe2-ba93-637560a78631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:ec:0a:c1:69:78:c3:ef:cb:2a:e2:ca:f4:
                    ba:26:ef:3f:f0:fe:10:73:cf:19:87:16:48:b8:4e:
                    98:51:77:7e:3e:ca:d7:ed:2c:61:77:3b:be:61:7b:
                    8b:be:ab:21:27:0d:fd:e2:62:36:4a:f2:68:84:11:
                    cc:21:73:09:95:46:d6:86:1f:22:ac:62:18:0b:58:
                    a6:a8:2f:5b:1f:b1:8c:9f:d1:e7:af:a2:b8:87:5e:
                    3e:f4:9f:93:68:42:b0:00:3f:0d:85:88:2d:76:c9:
                    45:e2:d5:11:41:62:70:b5:58:d9:9b:09:7f:63:81:
                    ea:96:ea:ea:2f:ea:ee:b0:2e:f9:18:34:a1:17:ec:
                    c5:11:e2:ab:8b:ca:14:1b:af:33:d2:af:c7:43:b4:
                    f4:fb:fb:38:fb:42:36:c9:61:e4:d3:69:4f:7b:9f:
                    91:8e:b2:20:c0:da:e3:15:79:35:71:26:30:b4:20:
                    3b:ce:b3:0d:93:62:de:c3:d9:3b:a7:a0:59:c4:dd:
                    dd:a7:85:a7:3c:bb:26:3b:9f:e0:75:38:d6:66:ea:
                    ec:30:90:c9:5d:2f:f3:bc:7b:91:fc:0e:44:17:ef:
                    26:97:3b:81:bc:1f:71:5c:fe:6b:9c:28:4e:5e:36:
                    b5:4a:de:96:25:48:ba:c1:09:e1:53:4e:13:2f:42:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:08:8B:32:49:B6:B5:55:60:CD:53:CD:C4:3C:83:A0:91:E1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:ff:cd:15:a0:c1:cc:cd:b4:c2:77:98:04:09:76:0b:46:
         07:bb:88:e5:28:68:ba:67:a3:bc:3b:a2:63:eb:51:43:aa:61:
         c8:b7:55:14:f4:1b:c0:43:a6:08:82:1a:28:66:e3:d9:92:ee:
         2f:74:1c:2d:ff:b3:28:1a:5e:67:83:28:0e:9f:bb:3b:f1:d7:
         b8:0a:f5:ee:ab:00:9b:c2:14:5d:02:3f:c4:90:c6:4d:4a:7b:
         67:b9:9c:76:87:e0:dc:96:23:08:f2:ee:a7:84:6d:5e:6f:09:
         e2:22:49:3f:0d:38:c8:32:1a:3e:df:34:09:65:e0:83:fc:45:
         48:e2:bd:fb:8c:81:6e:1f:4c:a3:3f:15:9f:9c:86:7d:76:aa:
         ec:27:4a:33:77:46:59:85:f2:b1:ad:db:40:eb:1a:01:b0:e1:
         30:63:6e:41:af:00:9e:93:d4:59:84:0f:00:29:b2:ec:73:50:
         d4:30:37:ba:51:fa:01:8b:c2:6a:a3:bb:f8:bb:83:d5:8b:8d:
         68:b8:8e:23:c6:bc:f1:70:5f:96:b8:60:71:9c:3e:4b:bb:5e:
         f8:f0:c0:49:23:5f:77:d4:f8:88:d4:1b:ad:c7:ef:7a:c2:8a:
         b4:5b:77:1a:cb:a5:8f:4a:b6:b8:2b:b2:89:c5:71:5f:8e:b5:
         5c:5f:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:51 2025 by rpki-client