Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/91520161-ba55-3754-b67c-dcdb4628467f.roa
File:                     91520161-ba55-3754-b67c-dcdb4628467f.roa (raw, json)
Hash identifier:          +vA2fIMjrrOcUwF1wUg0xIlinyZAjuwCNTaeJJks5KQ=
Subject key identifier:   CA:EF:D7:F7:7C:E7:E0:9C:1B:07:8A:F4:18:25:CF:61:31:AC:2E:A0
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584B864CB16C524BA2A9CD073780
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/91520161-ba55-3754-b67c-dcdb4628467f.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     36352
IP address blocks:        172.99.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b1:6c:52:4b:a2:a9:cd:07:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=e7dbf09d-1bf2-4646-a64a-08b2abfe4c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:51:4c:21:9c:14:a7:97:c4:0b:3e:22:60:
                    73:ae:bf:91:f4:62:06:c8:8c:70:15:c6:40:7f:86:
                    f4:68:01:e2:fb:0d:a0:10:32:94:b9:6e:cb:e4:e5:
                    47:de:29:e7:25:af:7c:76:9c:bf:dd:dc:4d:de:c3:
                    fa:f7:15:c6:32:6f:20:30:13:fb:f9:b3:73:94:d1:
                    ed:34:26:c2:ff:a4:2c:32:cc:f1:e7:90:27:88:61:
                    39:b7:ee:c0:cc:19:e5:fc:85:ac:21:ce:a3:6c:bd:
                    11:8b:e7:d7:cd:50:18:ca:60:25:3c:1f:f8:a3:95:
                    82:f7:d2:80:ec:2d:89:8c:7b:e7:14:7e:42:cf:23:
                    4b:24:1b:73:e6:6b:69:dc:b2:71:0a:ec:d7:a4:10:
                    7d:75:e0:28:2d:85:a7:3e:1a:b6:34:d1:86:af:0a:
                    48:d2:fc:19:79:94:a8:54:16:a7:9f:0c:dc:eb:20:
                    ac:9e:76:e1:14:73:fb:77:b9:a0:c0:52:a3:b8:02:
                    d6:c1:7c:82:03:67:41:fd:a8:0f:53:b5:a8:7a:50:
                    da:79:33:c8:fb:07:a5:a1:6e:a1:ec:f9:27:9a:be:
                    de:83:c4:74:6a:db:a7:37:f2:c2:5a:74:15:01:95:
                    b9:de:a7:ad:eb:85:67:38:b1:ab:07:27:97:61:59:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:D7:F7:7C:E7:E0:9C:1B:07:8A:F4:18:25:CF:61:31:AC:2E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/91520161-ba55-3754-b67c-dcdb4628467f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:d3:0b:8b:68:ae:e7:f2:b9:e7:2f:99:40:0f:fd:74:59:
         23:ba:d5:6b:73:9b:27:25:1e:2c:a7:ac:0c:5d:42:fd:8e:80:
         5a:24:ec:d4:21:31:d5:04:ee:72:e8:5a:d1:9c:72:89:f0:37:
         16:a6:c5:68:d9:4e:f5:3d:00:2a:df:bc:3f:50:4e:17:b1:06:
         98:80:16:2a:01:c9:38:fe:27:af:f7:a7:93:bc:15:18:3c:1c:
         7e:f7:4b:8e:bd:5b:19:1e:2f:79:a1:59:80:c3:9e:94:4d:63:
         20:51:78:a5:fb:b7:4f:fa:e2:1f:a9:bb:fc:bc:84:1b:21:33:
         6e:89:aa:c0:4e:cb:74:3c:fb:50:81:d0:c1:8c:91:ef:7b:24:
         64:ba:b1:d1:5d:f6:01:fc:2e:2b:0e:b2:ea:24:21:b6:c2:85:
         a6:a1:b1:dd:8f:d4:fa:fb:fa:f8:8a:51:a6:c2:3c:47:51:60:
         a4:cd:e2:72:4d:59:65:c6:77:9d:e5:b0:d9:1d:81:82:72:c3:
         f0:0a:3e:fa:8c:3f:56:7e:48:b2:98:af:4e:76:7c:be:01:3e:
         a6:f9:70:b7:a0:5b:ac:da:df:7c:e6:2f:86:57:d2:c0:cd:a9:
         b1:ec:6f:81:c1:39:c9:ca:cf:43:6a:05:cf:c3:26:c4:15:7b:
         79:07:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:37 2025 by rpki-client