Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
File:                     99d2ed0c-4a14-3830-be28-7be64d0706c0.roa (raw, json)
Hash identifier:          gGiAx4B7ZX2G28pWRlUs1DckHBzrDS2Vg9qFkB5vZ1s=
Subject key identifier:   A8:6E:12:35:BC:DF:73:CE:BA:0A:A3:F3:E2:1B:5C:EE:DB:5E:1A:BC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B715CB50AF688804BAA566A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     16276
IP address blocks:        180.149.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b5:0a:f6:88:80:4b:aa:56:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=b80e7994-e4c9-442e-8f0b-0b535122b727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:80:18:a9:8f:88:32:1e:f1:78:88:67:53:
                    ad:be:29:e8:19:d9:d8:12:bf:e3:5a:c9:9f:ab:5d:
                    92:f5:63:06:58:fe:cb:d1:6c:bc:0c:8e:43:8e:62:
                    29:39:da:82:1f:9f:64:ae:bb:6a:1c:35:16:d9:5a:
                    88:54:6a:89:32:a2:a3:7b:01:a8:c9:a9:62:e0:ee:
                    c7:da:83:d9:67:08:32:19:de:40:7a:6e:96:4f:06:
                    09:3b:94:8f:b5:6a:7d:5b:f5:7c:66:96:66:00:3b:
                    c4:11:ae:d2:07:ca:b7:e9:57:37:78:16:88:07:46:
                    93:bb:50:ee:e8:af:ac:2c:a4:88:6e:d7:f2:a8:65:
                    d7:96:59:b8:5f:59:d9:0d:c4:5a:29:9c:0c:db:04:
                    87:fa:69:c8:69:17:4a:38:86:a8:df:42:74:0f:ad:
                    9b:f2:81:23:c6:59:db:d6:df:37:90:1c:ff:de:f5:
                    54:38:6d:b7:66:e6:a6:13:06:25:6c:91:6b:1a:e7:
                    8e:a8:05:64:78:f8:0d:27:e1:2f:5b:a1:9c:29:11:
                    43:62:dd:ea:16:4a:6b:58:af:21:30:ea:03:46:28:
                    b9:79:83:29:91:1c:0d:f9:bc:cb:0b:79:dc:46:ff:
                    28:27:7a:8c:88:35:77:ee:24:50:2f:85:79:2d:d8:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:12:35:BC:DF:73:CE:BA:0A:A3:F3:E2:1B:5C:EE:DB:5E:1A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/99d2ed0c-4a14-3830-be28-7be64d0706c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:7f:94:bc:eb:35:bf:74:28:d4:10:e7:79:f6:0d:0c:a5:
         f9:16:b2:7d:a3:c9:fa:0f:ba:54:11:de:9d:0f:c7:7e:70:4f:
         6e:13:6b:17:ff:4f:ef:42:ee:a8:5e:e9:ef:83:b8:47:b0:b5:
         cf:3a:e4:63:b6:d6:03:c7:22:47:0b:2a:1f:c8:e6:d7:2d:89:
         71:af:b7:3d:85:45:ba:03:61:2f:77:0b:02:6f:f5:be:10:9a:
         c7:04:48:91:23:be:44:48:c2:23:f1:c3:f9:c4:72:23:5b:ed:
         5c:fd:ba:26:1e:10:74:f7:3a:a5:b6:61:7c:38:00:c9:49:99:
         cc:4e:a3:74:71:c7:b0:30:78:55:ac:45:fd:ca:d6:f8:0a:2b:
         5d:59:9d:d3:7b:50:1d:3c:80:fc:40:87:a4:cc:99:7c:49:74:
         1c:17:3f:aa:b2:74:0b:15:2e:8e:50:28:cc:df:be:53:95:b0:
         61:b1:0a:8c:54:8f:fc:a3:48:bc:99:94:df:a6:af:a5:cf:ca:
         ce:fa:e6:62:63:73:8f:13:04:0d:0e:6a:2c:7c:66:af:23:f4:
         79:cf:9c:2b:c0:04:61:3c:98:14:61:49:4f:fb:b2:15:5c:e8:
         0b:8c:91:b6:7a:6c:81:d8:d5:25:1e:46:70:28:a6:62:54:72:
         38:85:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:25 2025 by rpki-client