Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/deb0b6e7-8cf1-35a9-949e-13855833034d.roa
File:                     deb0b6e7-8cf1-35a9-949e-13855833034d.roa (raw, json)
Hash identifier:          doSUcsbb4kxszPDKQ8bTz0wKz46bdMw+llpsPOJun+Y=
Subject key identifier:   DD:D6:50:1D:5E:F8:60:85:32:0B:AA:8E:A0:AF:47:D0:F1:8E:C9:08
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797574E90CD03B2607B3A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/deb0b6e7-8cf1-35a9-949e-13855833034d.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:57:4e:90:cd:03:b2:60:7b:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=15b8b46c-2014-40ac-ad91-6772785bbd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:6d:9e:a4:ce:fc:1c:99:dd:a8:fd:da:28:
                    6a:b9:71:01:19:b1:c8:4d:76:f9:b3:a0:d4:69:1b:
                    34:a1:a7:fc:ed:bd:de:ad:b9:cb:6b:bb:94:c9:fb:
                    61:76:bb:7c:df:e8:d4:2e:b9:82:d6:7f:97:43:5b:
                    8a:e5:72:fd:91:a7:d0:a3:c9:1d:37:c2:27:f6:93:
                    ef:20:b8:6a:c3:bf:1a:8f:5a:e1:ee:70:f2:a0:37:
                    b3:6e:b9:fb:d0:62:ee:61:e9:aa:90:81:70:27:cc:
                    e4:36:c8:52:f6:dc:a9:40:05:6b:f5:ea:50:ca:5d:
                    cd:46:78:73:a0:eb:6e:4a:72:4f:6b:71:50:8c:0a:
                    90:9f:11:6f:80:77:ca:51:67:70:91:55:4e:15:8e:
                    bc:2d:96:b4:c9:5d:7c:df:c1:5a:c0:61:ff:6c:35:
                    1f:64:3d:98:75:62:bf:b4:18:27:d8:fe:2f:dd:6d:
                    d0:1b:50:db:c7:b5:43:d4:29:f2:3c:64:80:e1:e7:
                    ce:f7:23:d9:1c:8b:7b:5a:0a:25:c9:8a:83:58:f5:
                    9d:d4:11:c1:c7:20:61:a9:34:bb:c2:86:1c:18:f4:
                    2f:73:4f:2a:66:49:d4:57:87:13:c6:24:43:89:8c:
                    3e:e6:84:e2:25:05:66:a9:65:d5:1f:0d:14:99:68:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:50:1D:5E:F8:60:85:32:0B:AA:8E:A0:AF:47:D0:F1:8E:C9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/deb0b6e7-8cf1-35a9-949e-13855833034d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:15:2e:ff:8c:2e:a8:61:b9:59:01:bc:3a:a4:e8:37:c4:7b:
         21:dc:0f:37:cf:c9:88:14:08:25:21:25:8e:d8:74:40:d7:2d:
         62:ea:d0:86:5a:32:e6:38:30:43:51:2a:d2:59:4a:cf:bf:22:
         1e:71:a9:37:66:d7:5f:b1:4d:00:b0:9a:e6:41:37:c9:17:5f:
         dc:61:bc:10:ef:61:40:02:0a:6c:ec:a7:8f:a4:87:1b:e6:34:
         d9:43:0b:9e:43:0e:0b:ec:c3:df:d0:f1:a7:97:87:37:63:57:
         4f:a7:a4:95:2d:cf:ca:de:cc:e2:b7:42:1f:95:5d:cf:fb:6c:
         cf:c1:f0:67:6d:6d:9b:7d:7f:1c:ba:07:39:51:c6:2f:f3:5e:
         cf:fe:5b:70:d1:4f:16:84:51:fd:da:4f:a7:3c:f0:33:26:61:
         47:31:6b:3c:b2:ba:ce:c2:3e:57:81:79:17:2f:3c:3b:c5:39:
         28:db:06:08:8b:62:a9:71:d3:1f:0a:a3:47:d8:8b:57:e8:0f:
         05:22:a1:5b:18:e9:ea:67:67:bf:a5:c6:6e:b2:c5:85:08:e8:
         cf:29:57:2c:ac:2e:e6:b6:0e:2b:6b:b5:f4:92:b7:85:f4:cb:
         87:eb:00:99:8a:0a:a3:35:b8:cd:58:f4:00:79:d4:9c:10:76:
         6d:2e:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:40 2025 by rpki-client