Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa
File:                     132e666f-3154-3555-be51-484325b33d86.roa (raw, json)
Hash identifier:          axIYTiYveJB7UKIcEl0cp7KRJo3iGOjMbGg5DJVvm2w=
Subject key identifier:   32:88:4C:6F:52:0A:0A:52:6A:E5:CE:9C:B4:CA:52:CE:EE:ED:76:93
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F4328584B87B2203477CE381789FFD980
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        192.159.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:20:34:77:ce:38:17:89:ff:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=9f124296-507d-4406-9d86-fb1345b899f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:61:98:d0:c8:29:20:a7:3b:74:c8:e0:dd:
                    c8:35:37:3b:64:05:53:e9:c1:66:04:b7:a9:bb:00:
                    0b:d5:1a:39:d6:3a:43:45:c8:d7:1e:1c:43:f2:db:
                    46:ef:3d:6c:a2:d6:b1:17:4e:07:46:0c:0d:79:f3:
                    cb:99:4f:56:24:e5:06:37:70:dc:bc:a0:4d:fe:6c:
                    4e:8d:c0:be:89:bb:1e:d2:86:d5:f7:c0:b5:db:7d:
                    1c:61:a5:47:02:3e:d3:75:b2:d1:c4:53:a5:de:6c:
                    ce:fb:4e:a6:94:0c:74:ef:44:45:03:d9:59:bf:1c:
                    48:ac:80:c4:f1:2a:cc:90:c5:39:be:03:6d:6c:b0:
                    61:88:27:f8:0f:69:bf:ef:3e:e9:e8:d3:ff:7b:9f:
                    79:20:f0:a8:e1:e8:33:9a:92:a1:6f:e5:9f:0f:7a:
                    17:f6:45:d7:fb:2a:a7:a7:b5:11:e8:6c:94:74:c6:
                    23:9f:37:7d:62:28:6e:ec:89:05:76:51:4c:7b:ee:
                    b7:60:6c:39:c0:ea:59:30:a8:3c:09:96:2c:bb:10:
                    49:20:42:5f:53:18:53:85:04:12:fc:1e:25:46:ec:
                    65:a9:47:df:cb:df:31:52:af:ab:8e:f7:dc:ae:ce:
                    e4:4d:e3:17:fb:30:e6:25:90:8a:27:d2:43:d7:5b:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:88:4C:6F:52:0A:0A:52:6A:E5:CE:9C:B4:CA:52:CE:EE:ED:76:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/132e666f-3154-3555-be51-484325b33d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:02:cc:fc:13:51:38:98:49:8f:4f:04:06:d1:3f:d3:b6:2c:
         1f:cc:53:b9:cc:56:69:08:c2:32:43:6f:d6:ad:67:86:61:b8:
         f4:d8:a6:66:ae:4b:49:81:d4:6f:ac:5d:a7:b0:fa:ea:a1:dd:
         e0:6a:8a:66:ab:ce:3f:c8:8b:6a:d3:2a:7a:d2:f9:ee:30:ea:
         31:f7:16:9f:c1:30:30:63:1d:4e:41:5d:07:e2:cf:d2:d0:af:
         98:eb:0d:86:41:95:bb:a5:86:73:a2:00:0f:8b:e3:f4:91:16:
         e9:d3:8e:68:40:93:5b:b4:eb:ec:a4:75:25:f4:19:e2:f1:95:
         9c:c9:f1:87:75:ac:1f:fb:3d:2c:89:47:e6:6e:fa:a7:af:5a:
         0d:b1:13:6a:be:d1:bc:7b:c5:d3:b5:35:21:86:02:3e:43:01:
         1a:86:f8:26:c8:7e:06:f8:ae:1f:22:52:63:ef:04:e2:4e:43:
         13:8e:59:ea:b8:dd:44:d7:75:01:45:d5:0f:7d:d0:dc:ae:1f:
         e1:b8:23:b2:f4:b1:f7:14:4d:f5:9b:6e:9f:ea:e3:9c:d9:89:
         6b:c0:95:e1:1e:28:3a:4e:2c:9a:da:55:a5:8e:13:26:26:fb:
         b0:da:cf:48:f7:df:2b:4e:68:e4:3d:9c:eb:7b:62:b3:f8:6f:
         19:6c:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:43:25 2025 by rpki-client