Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/700e1d9d-41df-30b2-877a-81cfc972a4f9.roa
File:                     700e1d9d-41df-30b2-877a-81cfc972a4f9.roa (raw, json)
Hash identifier:          nVx/2Oa4nVZTzNPlShNJL6mCuQryF9M4oxcsnMAaDZo=
Subject key identifier:   AF:93:53:57:75:7A:B5:58:80:86:A9:FD:A1:C9:1A:20:54:A4:3C:B6
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584B8C29110D186A141693234000
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/700e1d9d-41df-30b2-877a-81cfc972a4f9.roa
Signing time:             Thu 16 Oct 2025 21:01:55 +0000
ROA not before:           Thu 16 Oct 2025 21:01:55 +0000
ROA not after:            Wed 14 Jan 2026 22:01:55 +0000
asID:                     11404
IP address blocks:        142.248.112.0/22 maxlen: 22
                          142.248.112.0/24 maxlen: 24
                          142.248.113.0/24 maxlen: 24
                          142.248.114.0/24 maxlen: 24
                          142.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8c:29:11:0d:18:6a:14:16:93:23:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: Oct 16 21:01:55 2025 GMT
            Not After : Jan 14 22:01:55 2026 GMT
        Subject: CN=21a8aacf-9bf7-45c3-9ade-15adb3e58d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:f7:a8:41:43:0c:eb:10:75:b8:4c:3e:25:
                    12:6b:a4:26:63:d2:ca:1b:69:ae:24:b6:70:c9:3e:
                    8c:f2:06:8e:e2:ff:f4:00:b9:a9:3a:a8:0a:84:4a:
                    9b:fa:40:cb:7b:d5:f7:4d:06:a1:b6:8b:9b:25:28:
                    74:71:84:d9:9c:5d:30:44:fe:5d:c9:e0:8a:f7:7f:
                    64:e8:8e:e1:83:06:3d:38:96:27:b2:1a:d4:83:6a:
                    40:ce:15:1e:89:3e:57:3a:67:1f:26:1e:df:2e:2b:
                    5e:92:d5:88:97:0b:24:44:7c:d1:d1:cc:86:43:c3:
                    a4:fe:8b:44:c6:fc:41:1c:b7:34:3b:7e:d8:50:4d:
                    7a:e5:3f:81:c1:6b:c1:65:29:10:34:6b:12:9d:63:
                    c2:3e:71:21:97:81:15:8d:d5:45:dd:9d:8b:97:a7:
                    81:59:a2:e0:e9:25:22:bb:3a:0b:a9:21:49:f3:ca:
                    09:05:8d:8f:74:89:70:da:e3:d3:26:30:5c:0d:1a:
                    79:de:fe:38:af:f5:c5:6b:4a:e4:f2:07:9d:4e:a3:
                    99:53:54:8b:85:b0:46:46:78:e4:30:4a:5e:85:50:
                    9b:33:41:5b:80:41:50:73:a6:c3:d1:f2:de:3f:c5:
                    89:d1:05:88:97:6f:79:8c:48:89:27:27:0d:51:50:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:53:57:75:7A:B5:58:80:86:A9:FD:A1:C9:1A:20:54:A4:3C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/700e1d9d-41df-30b2-877a-81cfc972a4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:d6:e4:6b:bc:cd:fd:63:42:3e:a1:c5:30:1e:66:4c:77:
         a6:9a:95:98:96:81:2e:15:f0:c7:72:f5:64:4a:f7:d8:90:b4:
         5d:84:eb:33:c2:47:4c:5e:dd:01:a8:8b:a9:cd:aa:df:b4:f2:
         5f:69:08:56:ff:34:1e:79:18:c5:14:77:a9:14:35:6a:6c:2d:
         c6:4c:44:3b:58:9d:39:71:e8:68:50:da:58:ef:41:80:a5:fb:
         8c:b0:d3:ea:2c:16:68:b3:1c:8d:c9:19:1f:ea:53:cc:df:0f:
         1f:d5:fa:70:dd:9c:a7:48:85:7f:74:c7:56:07:cf:01:f7:ed:
         8e:ad:56:28:97:59:a0:73:7d:f8:2a:5c:8f:78:99:3f:1d:e9:
         af:1e:45:91:25:b1:c0:2a:89:8a:cb:ee:50:29:a5:d9:88:e9:
         d1:eb:27:2e:c7:16:52:c6:67:e8:9d:60:80:4c:63:cc:5d:4d:
         9f:05:87:28:fc:f9:94:2b:b3:fc:58:d7:ae:9a:ba:b9:6b:e8:
         ee:63:3f:1e:3c:61:0a:d7:7b:36:5c:67:ce:54:03:59:cf:ed:
         87:94:84:27:b0:6e:14:95:30:61:3f:7a:5b:97:b6:1e:8a:83:
         8a:d9:f9:78:85:e5:8f:1c:9e:de:d4:1f:63:95:88:43:ff:17:
         ad:ab:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:00:26 2025 by rpki-client