Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b158726-223b-315c-a2fa-a56463a56aad.roa
File:                     2b158726-223b-315c-a2fa-a56463a56aad.roa (raw, json)
Hash identifier:          1jTvLnvJN3aAES9TXN7NzBKKUMdZv6RFfD4mu6Et+sA=
Subject key identifier:   3C:C9:16:65:E3:60:FA:95:DF:DE:37:E3:A3:C8:A0:A3:62:B7:20:71
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF2BD562F7390D2D10B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b158726-223b-315c-a2fa-a56463a56aad.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        142.254.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f2:bd:56:2f:73:90:d2:d1:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=1ffad2ce-034b-4cf6-b293-74f4e4f1db3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:a2:b6:8a:0c:e8:2f:a4:76:cb:dd:47:fb:
                    9e:8b:54:8d:d1:91:f8:86:0f:71:09:e4:b5:89:c1:
                    39:ce:ff:5b:57:3e:41:78:22:cc:2c:38:58:50:8e:
                    df:ad:7d:83:fd:eb:e7:20:8d:28:b5:47:29:51:87:
                    6d:86:52:ec:cf:fb:ce:c7:9a:7e:24:63:51:35:bc:
                    fe:a4:14:e7:32:d9:7d:e4:67:c9:31:16:57:9d:05:
                    6d:50:5e:c3:ae:93:b3:ba:2e:5d:2d:85:1b:f7:53:
                    92:79:25:d8:8e:4e:aa:3c:6f:db:dd:15:6f:62:af:
                    f6:09:c6:af:52:d3:36:84:63:09:b1:65:ea:4e:f7:
                    dc:8c:e2:f1:01:ee:6c:37:71:09:a2:2d:dc:21:5e:
                    0a:e1:ee:6b:ce:81:ca:43:f6:67:26:c9:21:f8:44:
                    52:b4:25:22:57:92:ae:09:a2:cd:2c:e9:02:78:01:
                    eb:7c:26:ef:b6:b4:ee:30:36:d3:6c:f3:d1:7a:11:
                    a3:ea:72:d0:e9:b7:4b:6e:e9:7b:bc:29:06:60:e0:
                    91:ef:b2:2e:da:17:6c:4d:a6:c1:e5:ed:b4:ee:6e:
                    f8:ba:6c:6b:a7:ab:bd:a2:7d:ac:b8:0f:d1:f3:5e:
                    dc:20:04:60:24:24:df:a4:98:86:99:9c:ff:2e:c5:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:16:65:E3:60:FA:95:DF:DE:37:E3:A3:C8:A0:A3:62:B7:20:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b158726-223b-315c-a2fa-a56463a56aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.254.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:d8:c4:4a:ae:71:cd:f4:bd:24:b3:7c:38:d0:46:10:e7:
         fb:73:6f:7d:e5:4c:37:48:78:f4:bf:01:db:58:b0:61:fe:28:
         f5:39:ca:b2:5c:f3:42:b4:a6:90:09:67:b4:34:b9:b5:31:38:
         5f:7e:dc:01:f3:a2:2e:75:d1:ed:02:7d:6b:80:c2:79:dd:c7:
         09:63:97:ec:ab:d1:c1:ed:4f:84:e4:33:49:29:2a:44:87:72:
         32:9f:71:79:66:90:f1:d9:43:6f:f3:0f:eb:1f:f0:e3:0a:0a:
         05:5f:2c:d2:81:a7:8b:fd:99:c5:35:1f:19:07:ad:ff:12:42:
         8e:d8:c8:dc:e5:a8:92:f6:b5:d8:e6:67:8e:0a:0e:c8:21:2c:
         b9:ca:34:c3:7a:0f:6c:c0:71:92:dc:e1:77:a0:6b:26:a1:02:
         04:9e:ff:ec:4a:f9:50:fa:5d:df:f2:a4:01:4b:5f:7a:5f:f6:
         5f:5f:a1:16:21:04:1d:b8:19:ec:13:b9:35:e4:bd:11:22:3c:
         90:32:82:75:e7:91:e7:ff:ac:f7:a5:72:f0:f1:3c:d6:bb:f1:
         35:76:80:10:66:6d:8c:f3:58:cc:c3:5a:23:99:d9:09:1c:78:
         f4:c5:c2:3e:51:39:e2:e5:5c:8d:4b:f6:46:e9:2b:15:99:05:
         f4:bb:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:06 2025 by rpki-client