Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1498e34c-e721-38d1-b5f3-263d287fa0d7.roa
File:                     1498e34c-e721-38d1-b5f3-263d287fa0d7.roa (raw, json)
Hash identifier:          f0nKPYc8o+eI+uW9VgT7DStKiMrLSt7xp3HSJjTQH0E=
Subject key identifier:   DB:6F:65:DE:4B:55:B9:62:83:52:AE:9D:C4:12:33:01:A3:EE:E7:F3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CE247F53D8F18EF20F16E0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1498e34c-e721-38d1-b5f3-263d287fa0d7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.65.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:24:7f:53:d8:f1:8e:f2:0f:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8867a14a-53de-48c4-9e0a-61fbbb41fef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:fb:65:f4:9d:58:f0:b8:19:22:3b:fb:fd:
                    45:32:ae:1d:a6:ec:5c:63:10:69:a6:b0:9d:68:21:
                    bb:b7:18:d3:56:c4:12:94:30:d5:86:23:72:f7:ef:
                    c4:2d:89:67:49:cf:63:23:50:63:81:d3:58:0c:72:
                    72:f6:30:eb:92:bd:6a:90:39:76:60:8c:89:c0:a5:
                    f5:d7:f8:6e:61:ec:89:ed:81:bd:2d:7c:6c:cb:1f:
                    5a:6e:e0:29:8e:b9:be:50:07:e1:2e:c7:af:07:9b:
                    cc:f4:54:58:b4:fd:58:ec:f9:99:9b:c9:fe:b3:42:
                    1b:8c:10:5b:ef:33:58:97:92:e4:54:4e:99:27:48:
                    b6:22:1e:ee:e8:5f:af:68:f2:01:e8:20:4c:13:aa:
                    5f:fb:eb:89:66:0f:b3:8c:73:be:15:89:84:ff:df:
                    2e:19:88:a6:ee:48:4c:b2:77:85:a9:22:84:dd:7f:
                    02:7f:13:31:87:5c:b1:ec:97:ec:39:dd:4a:0d:56:
                    46:95:7c:84:44:50:22:a9:a1:fb:1d:f5:71:4e:3a:
                    92:40:22:d1:13:d6:49:40:04:d2:bf:d1:7c:3b:68:
                    19:39:23:cc:43:dd:33:f0:fe:37:37:17:36:90:01:
                    9e:2e:c8:12:79:d8:40:f7:f1:ed:8e:49:c3:e4:c1:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:65:DE:4B:55:B9:62:83:52:AE:9D:C4:12:33:01:A3:EE:E7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1498e34c-e721-38d1-b5f3-263d287fa0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:87:45:ab:ae:b1:2a:25:b4:8a:fe:61:87:a2:47:85:bd:75:
         fb:5f:6c:90:44:82:33:f5:7d:11:ab:65:3f:ce:69:47:24:60:
         7c:e5:dd:1e:8e:a5:77:ed:36:15:db:c6:0b:c7:e5:93:f5:8b:
         e1:f9:f5:cc:d8:c5:64:ee:9c:36:25:18:e1:10:02:78:9b:e0:
         17:d3:76:1f:81:f9:65:2e:40:ca:e9:6c:f3:ff:9f:ee:f0:14:
         60:98:b0:1d:91:0b:0b:b3:52:09:a5:b1:44:dc:36:d7:6f:59:
         b2:46:36:dc:b4:a6:64:5a:5b:14:52:20:10:57:9b:1b:d3:0f:
         e7:55:56:02:f5:41:d8:dc:df:3e:41:a5:0c:84:e3:be:71:80:
         4a:e2:61:d8:40:b7:1e:b0:53:d3:85:1e:b5:9a:55:64:e2:a9:
         e3:b3:b6:8d:be:c0:0e:64:e1:0b:b8:df:b8:a9:ad:dd:2c:f2:
         71:e7:ed:89:94:b8:ba:ff:01:9b:b1:7c:24:17:81:77:54:63:
         18:75:fb:4c:8b:ea:aa:76:aa:da:09:d0:64:cc:f7:40:3b:0e:
         d7:85:68:3b:3f:f0:06:ca:05:ac:2e:1b:4f:c8:4d:a8:b6:e1:
         32:6b:da:97:37:85:0d:1e:91:b4:99:50:1d:2a:5c:68:c8:97:
         c9:c1:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:34 2025 by rpki-client