Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
File:                     2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa (raw, json)
Hash identifier:          aMwankKQlYcHpZK/gh1UObb7hO2hlFDTvmD+zo8mVOY=
Subject key identifier:   93:B5:1A:A4:62:50:D8:31:EB:4F:19:25:AF:17:0E:4A:64:1D:7E:0F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584B8BE22E7E1A62BB67671B3A80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     20454
IP address blocks:        131.153.231.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2e:7e:1a:62:bb:67:67:1b:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=caa0d21d-23ea-4b13-b2f4-d824a26d2ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:40:f0:82:c3:81:d6:bf:4c:62:7b:17:53:
                    8e:88:b5:57:14:dd:e6:d2:4f:89:6f:8a:0b:00:b9:
                    eb:a4:25:8d:23:a4:68:d0:ce:e1:f1:3f:8f:dd:86:
                    75:25:1b:c3:11:4a:a8:7c:84:59:cc:78:0d:31:ec:
                    2a:0c:4a:25:68:f3:c9:9d:9c:6a:66:ed:8b:63:45:
                    da:c8:17:ff:ce:6d:e8:74:bd:68:cb:1c:65:e9:b1:
                    1e:0a:5f:4c:3e:f3:6c:e4:70:5e:12:76:57:8d:f8:
                    a0:a6:db:d2:1a:83:ef:e5:b4:61:c6:98:91:5c:0b:
                    3c:4f:44:4c:cc:bd:2b:5e:ee:10:8a:60:4b:58:7a:
                    31:2f:4f:da:70:cf:fd:f2:93:e4:e9:ef:5d:2c:2e:
                    3a:34:7c:b3:a7:85:9b:94:78:dc:81:46:cb:75:c3:
                    8c:a7:68:b6:21:5b:5a:5c:75:39:e8:6f:d0:0d:e5:
                    4b:bb:b1:ef:b0:86:c0:4f:b9:5d:55:1b:50:b2:0e:
                    ea:d0:ef:44:81:0b:72:30:d4:2a:93:b3:18:c2:1a:
                    9c:92:6e:3b:7d:f0:8c:cd:55:a7:de:6b:94:e3:2f:
                    df:38:06:77:17:03:de:06:ee:d5:0f:77:1d:f5:1d:
                    f9:e9:3d:d7:11:b6:4a:67:fb:f6:3e:f9:ba:f3:60:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:1A:A4:62:50:D8:31:EB:4F:19:25:AF:17:0E:4A:64:1D:7E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:d6:ae:29:54:7b:d0:f8:1c:93:ae:93:d1:d4:30:30:88:
         2e:f0:24:a9:eb:71:b4:34:67:bf:f6:4e:33:57:65:b2:e2:63:
         d3:91:2f:f0:37:01:4b:e9:88:8c:85:12:18:a5:08:e9:82:4b:
         7e:15:90:21:75:a4:e0:3d:21:fb:b6:f9:48:5e:1f:fb:57:e7:
         37:6c:6f:03:ab:72:b7:ba:49:f0:37:5e:00:9c:6a:75:47:80:
         97:15:dd:ea:c0:68:8b:c5:cb:ab:4f:eb:a9:61:16:0b:70:16:
         af:12:bb:e9:2e:ae:54:a7:cb:7d:9d:10:33:e9:eb:c8:d3:f2:
         5f:db:a7:1d:5b:a7:67:c0:f0:76:02:91:9d:5b:29:b6:dc:a6:
         1f:74:50:0b:88:54:0c:62:15:a1:66:e3:76:54:f0:82:e0:35:
         55:69:a3:88:ff:20:c0:d7:e4:80:04:f2:83:e9:51:f6:88:b4:
         a5:7a:91:a6:f3:56:9d:ca:30:08:0a:60:ae:e8:76:5e:87:ed:
         20:49:68:c9:f9:b2:f0:ec:c0:dd:15:01:28:95:e5:d2:7a:54:
         64:dd:bf:27:40:c4:82:82:53:b0:b4:57:29:8e:9a:4e:5e:38:
         ca:db:c3:b1:0f:98:78:9a:7b:fd:be:7c:a5:14:fb:c5:df:5a:
         e2:94:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:48 2025 by rpki-client