Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa
File:                     5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa (raw, json)
Hash identifier:          fHJGsKdUxcBljLDSjg4Ny/NGjPjIBmeHNUv++giBj1M=
Subject key identifier:   8B:9C:6D:52:0D:E3:2D:FA:7F:B4:B1:E6:C4:70:25:EE:E0:D2:0C:56
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584B2496CF9C13A71D814AC02380
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     9087
IP address blocks:        162.250.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cf:9c:13:a7:1d:81:4a:c0:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=7d6ec828-61be-4861-bb8f-13f433ca0adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:19:f3:39:99:49:c6:5b:28:3d:10:bc:a8:
                    2a:fe:c4:ec:01:62:0b:ff:98:5a:46:c1:66:cc:d2:
                    74:e8:60:87:20:b0:5f:9e:0e:ef:16:c1:27:06:c0:
                    5e:71:7b:25:03:73:18:a9:98:d7:0c:7b:72:74:6b:
                    13:9e:71:92:1e:e5:e5:7e:78:b2:da:9b:90:c6:96:
                    51:91:1c:a6:82:eb:cd:93:01:5d:53:ec:d9:f0:8a:
                    43:2f:10:d7:7a:35:8c:8d:71:1d:93:92:14:0a:23:
                    1c:1b:80:81:0a:c5:81:84:64:23:16:64:55:42:c2:
                    ef:4f:11:b6:76:ec:35:e6:fc:a5:36:15:ab:75:11:
                    64:2e:c8:4c:5d:4d:06:fd:0c:83:e6:da:a3:9b:7f:
                    f7:18:b6:c9:27:ae:59:40:0b:67:d1:69:f6:d0:64:
                    3d:1d:fd:bc:df:b0:4e:55:94:21:67:87:48:8e:51:
                    7a:ed:d0:50:ea:b9:46:84:af:18:31:a1:27:5e:81:
                    a3:e7:66:49:a2:9f:fc:bc:9d:ba:cb:d2:2b:02:c3:
                    46:cb:38:bd:37:29:58:dd:64:fd:e4:7a:a5:63:52:
                    56:e2:21:2d:d0:c0:8b:ae:64:bb:0c:b3:85:40:5c:
                    5c:7c:6a:32:7b:13:d0:88:dd:ba:2a:7a:7f:ff:15:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:6D:52:0D:E3:2D:FA:7F:B4:B1:E6:C4:70:25:EE:E0:D2:0C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5d7b0219-3792-3c46-bcb9-bb1a72d4b4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:25:28:4c:64:27:42:b0:6f:15:b3:61:4f:b0:3b:7e:37:
         63:28:36:42:16:07:dd:75:43:df:62:8f:b3:a1:40:84:df:83:
         78:6e:19:88:a8:28:15:55:16:b4:8f:ba:47:77:6a:c9:0f:8f:
         f7:31:a9:b5:39:25:61:8a:e0:a0:b6:70:13:8a:a7:97:18:a4:
         13:53:28:ea:71:79:0c:41:cc:e8:99:ba:c8:a0:28:2a:9f:36:
         5f:87:92:5a:0a:7d:4e:a2:95:79:3b:7e:c4:77:23:4c:bb:a0:
         ce:f4:86:e8:76:a1:f3:34:df:a2:6d:26:68:3f:ac:f9:45:4d:
         52:92:29:c2:2c:47:30:dd:50:d4:f1:7f:03:e9:21:6f:6c:f6:
         dc:0f:e1:77:31:8b:e4:68:2b:d2:a3:96:f6:65:b5:ff:af:36:
         fb:a1:65:e0:73:f5:10:7f:0a:d8:44:b6:b2:fa:4e:00:e8:99:
         df:8a:96:95:18:07:0e:f7:13:90:ea:fb:75:78:d7:40:6c:03:
         1c:41:84:ee:d7:3c:65:61:4a:eb:40:bb:54:28:f4:b2:72:13:
         17:26:44:33:04:c2:7c:dc:02:da:3e:2b:3f:fa:0f:44:31:3f:
         64:33:1d:e1:49:e7:55:0a:94:d2:7f:4a:e9:47:d1:b6:6a:64:
         a5:a7:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:35 2025 by rpki-client