Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa
File:                     a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa (raw, json)
Hash identifier:          wGaTiJHeGVJH5mMAgXFInKh3wWLlIOjBWpLKr2ErAIY=
Subject key identifier:   C2:6D:41:E2:D4:22:21:CE:B7:A9:2C:EE:8F:1A:DB:1F:7D:82:73:7B
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584B821CB8F2E45CA8E71DF10D80
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     203
IP address blocks:        170.188.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:b8:f2:e4:5c:a8:e7:1d:f1:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4d5e5bdd-f11d-4748-96f9-8812ef176a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:67:65:2a:f1:0e:e1:ef:6d:5f:29:95:ca:
                    45:fe:30:98:6e:f7:fa:7f:05:af:1b:1e:f9:97:f7:
                    0f:63:d3:ae:c8:b5:b1:52:c9:29:e4:ac:4e:bf:e9:
                    07:f9:fc:cb:ff:9b:46:6d:a3:99:1e:ab:aa:30:67:
                    6d:46:72:7b:87:aa:f0:b3:b5:95:6c:7e:e0:fc:1a:
                    c0:17:32:52:84:82:b1:f2:f9:39:f5:d8:89:9b:59:
                    7e:d9:f2:fb:a9:10:6c:07:17:93:27:4a:49:7e:44:
                    7d:b0:54:eb:7f:0e:45:22:d7:56:70:63:6b:7a:ea:
                    41:d0:8f:52:8f:4b:65:dd:59:95:da:38:ef:65:6d:
                    8b:51:5f:99:fe:2c:1d:55:b5:dc:51:d1:f0:15:59:
                    12:dc:4f:cf:19:0e:7f:95:13:ea:4f:6b:00:1a:69:
                    6f:6b:cc:49:06:b8:2e:a6:24:fc:6f:21:5a:3a:ab:
                    57:b1:33:07:e2:53:35:c9:de:03:41:f4:15:d1:b7:
                    70:30:03:0e:c4:c9:d1:a9:5f:f3:fd:22:7b:b1:1c:
                    8a:08:80:ab:b0:9e:1d:06:65:5d:3b:df:59:81:a7:
                    1b:1c:2b:6d:de:0b:5b:5d:08:bc:b9:08:2c:e4:2e:
                    47:c4:8c:6e:13:65:ff:99:9f:f0:c0:46:29:85:9b:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:41:E2:D4:22:21:CE:B7:A9:2C:EE:8F:1A:DB:1F:7D:82:73:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:df:3f:f5:c7:e0:27:a8:01:79:f9:c5:0b:61:85:73:63:fc:
         aa:b1:39:c5:cf:48:c9:53:87:4e:f7:8a:33:b8:1d:76:90:11:
         f0:0e:56:63:0b:7f:47:b1:4c:3a:0e:c1:a8:a6:3f:08:56:c6:
         43:d3:4c:ed:52:2d:39:e4:11:75:99:68:cb:46:66:27:0c:70:
         fb:aa:14:fc:0d:0b:02:2b:76:54:e9:51:3f:d7:b6:de:c2:39:
         d2:f3:8b:a2:9d:bb:c5:65:ca:e0:4b:15:8f:62:f5:cf:37:19:
         05:5b:60:90:2a:9d:0e:1e:1e:53:5e:e4:02:c2:79:ce:13:9f:
         db:62:08:9f:20:57:5e:6f:09:3e:a9:37:da:0d:c7:49:dc:d4:
         39:6a:e9:3f:bf:4c:8d:7f:2a:d4:47:d3:b2:4c:66:92:02:b4:
         53:58:d4:80:fa:d2:0b:8a:4a:ab:10:97:99:4c:d0:a6:75:8e:
         f6:ad:88:db:8e:46:e5:05:ed:86:25:c2:06:8d:0a:5b:5c:b3:
         6a:58:e9:20:7b:f9:0e:d0:1a:e9:41:a2:6b:a1:70:f9:87:09:
         0d:9c:06:b7:9d:b6:59:e5:ce:72:df:5a:3c:0b:43:15:85:95:
         bf:1b:19:4c:7f:39:ac:31:ec:3d:57:d5:2f:52:1a:ae:91:cf:
         04:6b:c4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:22 2025 by rpki-client