Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/f155ce72-2c78-3df6-89ed-b7e9d6206223.roa
File:                     f155ce72-2c78-3df6-89ed-b7e9d6206223.roa (raw, json)
Hash identifier:          JMlOUwIXalcAcwFtlUtZ3fvnl944JMoaIwS3uZHV94I=
Subject key identifier:   57:D4:5F:1F:27:25:2F:DC:4F:4E:55:49:88:EC:0E:2C:2D:78:EC:28
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328584B434C580991171674574CECA0
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/f155ce72-2c78-3df6-89ed-b7e9d6206223.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     14155
IP address blocks:        24.225.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:58:09:91:17:16:74:57:4c:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=e3af7c89-e656-41b9-8e57-a924c9fcdad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:f3:93:68:82:e2:b7:60:fc:de:3f:2d:52:
                    26:b6:07:11:83:89:34:28:23:46:83:1d:d0:89:df:
                    d0:58:81:6c:38:a8:56:e7:1b:50:59:86:60:37:f3:
                    72:99:e1:1b:23:87:bc:12:da:b6:f3:af:12:29:5b:
                    30:76:a9:0c:c0:13:df:e8:17:81:44:9c:d4:b3:0c:
                    76:3c:f7:36:48:d1:05:2b:77:5a:ad:6b:60:dc:54:
                    7d:40:b3:3d:b2:ae:42:8f:34:c1:1a:ab:d2:48:4d:
                    ad:c5:9f:04:17:d6:91:a0:a3:71:5f:36:67:d5:fa:
                    e2:d6:64:62:64:3d:c7:dd:c4:45:e5:aa:ed:c6:43:
                    52:96:35:93:45:0f:5c:27:c5:04:c5:00:7c:53:f5:
                    82:b7:e3:a2:c8:43:c3:f8:d2:c3:3b:fc:fc:b0:ee:
                    dc:06:0e:6b:53:f9:51:18:d4:08:d5:07:2c:30:ff:
                    19:5c:d3:76:75:f4:9e:a4:27:99:18:7b:6d:5e:21:
                    7b:10:2f:c4:f7:e7:54:af:a8:e5:60:58:07:93:50:
                    48:12:c9:6d:d9:da:24:30:0e:dc:89:fb:cf:da:90:
                    ff:a2:aa:dc:a8:cc:ab:6b:21:06:72:bf:9d:0a:b3:
                    03:ce:a3:2f:2a:74:09:3c:29:05:5a:d0:9b:b4:83:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:5F:1F:27:25:2F:DC:4F:4E:55:49:88:EC:0E:2C:2D:78:EC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/f155ce72-2c78-3df6-89ed-b7e9d6206223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:2c:5e:65:8e:81:aa:ce:21:e7:77:a2:93:9f:94:8f:03:
         98:fe:07:3b:b5:71:66:ae:a5:6d:28:34:ce:8e:3f:61:1f:ec:
         09:bd:62:74:c8:9b:64:6a:73:f9:41:51:7c:91:55:b5:bb:9c:
         62:eb:4b:d4:49:84:4e:d7:26:f7:59:46:f1:a5:7f:46:0b:e8:
         96:04:06:a3:82:85:8b:79:c4:dd:56:9e:7e:63:b5:10:eb:51:
         53:15:bc:8d:6f:66:70:51:f3:e3:03:f2:85:c5:dd:1b:93:34:
         0e:98:d0:0f:0f:14:4e:1e:83:c7:eb:3b:9d:60:22:61:bf:6c:
         35:29:4b:12:6d:a3:10:a0:ea:0d:f5:ef:78:4c:84:33:8a:34:
         c8:a4:46:34:fb:26:61:97:01:90:ef:9a:e5:ca:8c:ab:9b:e7:
         fc:30:e3:08:1e:71:57:c3:d1:47:68:62:d1:5c:cd:9e:73:68:
         4d:d5:32:49:cb:c8:89:b2:9e:70:c0:6f:d2:2e:4b:64:c2:1b:
         8b:99:4e:82:be:8f:3d:5e:a9:1e:0f:cc:ca:75:a0:67:40:ef:
         6b:7f:bf:5b:38:c6:c0:86:55:54:e2:d8:44:29:e6:c1:3b:e4:
         89:31:ba:83:3c:27:20:b1:99:f6:43:ae:d8:1b:39:75:b8:07:
         41:c8:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:24:35 2025 by rpki-client