Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa
File:                     b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa (raw, json)
Hash identifier:          e7rC7t/c2Om/N5SY3u7I59SgAsiMx5ea+EUpCuRyH/U=
Subject key identifier:   AE:48:84:67:1B:AA:C9:BD:26:F6:96:86:D3:32:0F:ED:31:F9:20:2A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B328C373F61F91074BFA5D1C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        128.14.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:37:3f:61:f9:10:74:bf:a5:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=7a83b48b-5452-4a4c-94a6-5001fb03ff59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:3b:d7:94:18:f0:90:e9:ef:c0:fe:da:a3:
                    75:17:ce:a6:23:8c:e2:17:9a:cf:87:6f:17:7a:bf:
                    be:43:42:66:10:f2:97:80:50:4e:3c:7e:30:c1:eb:
                    2f:44:30:f3:77:67:25:60:45:5d:d7:c7:70:c5:c2:
                    67:5b:d2:a0:5b:6c:a3:02:60:9d:0f:a3:73:5c:e1:
                    5e:39:60:d2:fe:dd:80:3f:bd:67:cb:ec:a8:96:ff:
                    fa:64:ca:09:ce:b8:28:06:be:88:a1:41:a5:7b:3f:
                    21:e9:93:c1:be:40:8f:7b:bf:2d:b0:43:1b:51:75:
                    c0:92:43:7e:c8:37:44:84:6c:d8:c9:81:5c:c3:64:
                    8e:ca:1a:c6:4a:eb:04:b7:b2:f7:c3:a7:01:97:08:
                    b4:09:db:98:91:d4:f0:53:76:b8:8a:cb:16:b3:32:
                    33:cc:93:8b:7d:04:2c:f0:5a:f4:a0:43:8b:13:54:
                    22:92:f7:7c:9e:ad:af:de:25:7f:e6:42:a7:c1:93:
                    1c:0b:ee:f8:29:a3:18:0b:24:ba:85:ec:ee:eb:07:
                    9d:3f:31:79:5d:e3:39:86:39:16:00:b6:63:df:a3:
                    2a:85:bb:29:88:c5:86:a7:f2:4f:be:92:48:1d:90:
                    11:8f:33:34:29:e7:ea:47:e4:18:1e:01:56:d9:bc:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:84:67:1B:AA:C9:BD:26:F6:96:86:D3:32:0F:ED:31:F9:20:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:4c:bb:6e:17:f7:97:d5:b3:e9:db:30:76:f6:a6:92:bc:
         18:0d:5a:30:fb:0b:30:2f:4f:87:32:d6:0f:e3:8b:eb:cd:66:
         5f:5c:5a:3a:fd:d8:ec:71:fd:13:ae:e4:13:30:2c:8d:8b:a9:
         39:53:2d:00:0f:0e:cd:0a:45:2e:49:58:60:73:2b:5d:38:7c:
         d7:fe:f0:06:17:43:d0:3f:3d:60:db:b2:2c:1e:0e:a1:c6:e3:
         fe:d3:47:03:e7:40:45:d4:5e:11:4e:8d:fd:5f:8d:f0:b9:52:
         d5:f0:87:49:e5:aa:37:30:25:9b:82:b3:24:a4:ab:a1:ab:ef:
         4d:a5:40:58:47:0c:0e:59:78:25:b5:2a:68:61:8b:b5:18:5d:
         6b:db:8a:65:08:ee:a4:94:ab:21:8c:5d:9a:30:76:26:9f:dc:
         0c:cc:66:4a:dd:0c:fe:0b:a7:d9:1a:ae:36:cf:3b:bf:e8:9f:
         9b:c0:99:ac:f1:26:d7:41:fb:67:c8:21:bb:75:cf:a9:73:95:
         c0:d9:c6:7e:78:7f:63:3e:e3:27:d8:8a:31:a8:7a:c8:9d:d2:
         99:ae:5b:ca:99:eb:a5:5b:fa:25:d4:6c:31:5f:b0:ee:dc:98:
         aa:9d:37:51:fc:a1:72:7b:ab:7a:90:19:de:2d:d5:e6:91:af:
         33:56:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:04 2025 by rpki-client