Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/5b3b63a3-008c-3862-b5f0-7a9ea902c1f6.roa
File:                     5b3b63a3-008c-3862-b5f0-7a9ea902c1f6.roa (raw, json)
Hash identifier:          m3sxzBuAaLksyej9qqBgR7ARJjbfbpnG7e7ZqClDMVI=
Subject key identifier:   15:CD:19:C2:30:53:80:80:41:33:4E:A6:1B:54:1A:E9:5B:8B:F9:27
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AF0F14B7B33C38DCC78E6C800
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/5b3b63a3-008c-3862-b5f0-7a9ea902c1f6.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        162.138.72.0/24 maxlen: 24
                          162.138.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4b:7b:33:c3:8d:cc:78:e6:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=c56ed400-5a7c-4e22-b7e9-3bcd724761da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:25:a2:8f:84:a1:2f:23:ab:9f:96:34:69:
                    be:e6:5e:eb:bf:4b:71:e8:ba:33:69:8f:18:07:94:
                    e8:e5:dd:70:f5:55:18:5b:18:a2:00:f4:77:3f:2d:
                    f7:bc:20:ef:2e:c0:13:68:bd:76:d1:5a:0d:7b:23:
                    74:b2:9d:d7:80:86:db:bf:1c:d2:58:bd:a5:a3:3f:
                    48:cc:72:37:c2:90:54:26:26:73:60:4f:99:fe:8b:
                    57:6a:67:db:d3:9f:a3:f4:be:8b:9b:6c:8a:ac:4c:
                    f2:71:3b:3d:79:df:2e:a5:2d:47:74:20:00:cd:7d:
                    df:97:71:01:31:21:38:6b:bf:66:84:3d:19:b3:5b:
                    57:26:fd:9a:c3:2b:c8:c0:0c:c8:a2:95:69:e3:b4:
                    01:bc:59:ff:71:5b:e0:3d:30:1e:38:57:f6:ea:1f:
                    e8:91:ec:17:91:ce:e4:5b:60:4e:e3:e9:fb:28:33:
                    b8:78:8f:80:08:c6:71:31:49:ac:ca:af:20:02:03:
                    f8:be:e2:2e:b2:05:b9:f4:e6:14:01:99:8f:c2:50:
                    22:d1:1f:de:a1:03:56:12:fe:eb:b6:2f:f0:20:13:
                    f4:ae:ac:a9:59:dd:d0:36:13:84:d3:9f:b9:94:f6:
                    8e:54:22:28:1b:3c:3a:a6:fa:8a:96:72:e1:1d:5a:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:19:C2:30:53:80:80:41:33:4E:A6:1B:54:1A:E9:5B:8B:F9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/5b3b63a3-008c-3862-b5f0-7a9ea902c1f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fe:81:43:8a:83:ed:9e:c9:77:8b:62:5f:f1:3d:57:13:13:
         c2:73:84:d4:12:ef:46:aa:f3:09:42:70:01:db:d9:59:32:56:
         4b:7e:4a:44:5a:06:a0:dd:f5:c9:13:e6:28:7c:77:04:eb:54:
         c8:db:21:96:fd:2a:d1:1c:1d:6d:e5:4a:9f:47:66:fe:e1:09:
         6a:23:94:b8:33:37:b0:9d:27:bd:90:3d:e4:b1:1b:33:01:b4:
         89:ab:b9:34:fb:90:17:c5:00:91:8b:29:cc:d9:73:ce:f7:80:
         16:14:ca:db:64:c0:c6:b4:23:03:69:9f:7b:1a:a5:97:f5:62:
         51:9f:c6:d2:49:68:0c:ac:48:cf:93:48:45:1f:5a:e2:ec:c0:
         88:52:a7:5f:38:b5:fc:cc:cb:bb:5f:41:6c:5c:b6:eb:26:db:
         1d:fe:d4:24:e3:af:e0:5b:ab:3e:23:6b:99:40:f1:31:24:bf:
         d1:e0:78:5b:19:de:ae:96:cf:3d:ad:cc:c6:31:33:ca:e3:10:
         61:bd:43:69:66:66:dd:3e:19:cb:f5:e7:35:56:ff:4a:f2:2c:
         2b:70:24:da:32:c9:46:22:c5:93:e3:81:58:68:87:e2:06:f7:
         c9:09:2d:5a:42:bc:a0:f8:ed:f0:46:6a:7b:ea:79:f0:4d:a3:
         6e:8c:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:18:04 2025 by rpki-client