Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
File:                     c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json)
Hash identifier:          ZU1BE+F9PZH+pdzdUICfi1/O9GqVryRzGPRCaQ8aIgY=
Subject key identifier:   C2:77:44:F3:A5:41:98:87:3A:F4:98:98:E7:58:70:F8:B2:72:63:35
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584B8D477DA45C7C86B177C07D00
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     3527
IP address blocks:        128.231.0.0/16 maxlen: 25
                          137.187.0.0/16 maxlen: 25
                          156.40.0.0/18 maxlen: 25
                          156.40.64.0/20 maxlen: 25
                          156.40.80.0/21 maxlen: 25
                          156.40.88.0/22 maxlen: 25
                          156.40.92.0/24 maxlen: 25
                          156.40.96.0/19 maxlen: 25
                          156.40.128.0/18 maxlen: 25
                          156.40.192.0/22 maxlen: 25
                          156.40.196.0/24 maxlen: 25
                          156.40.198.0/23 maxlen: 25
                          156.40.200.0/21 maxlen: 25
                          156.40.208.0/20 maxlen: 25
                          156.40.224.0/19 maxlen: 25
                          165.112.0.0/16 maxlen: 25
                          192.231.145.0/24 maxlen: 29
                          192.231.146.0/24 maxlen: 29
                          192.231.147.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7d:a4:5c:7c:86:b1:77:c0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=78bfb4be-ffe8-4d8b-8867-ccc11c716988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:ee:21:82:c3:fc:7a:95:12:f7:a8:11:96:
                    92:b8:7b:61:d2:96:3a:d4:19:d6:54:62:ad:40:b2:
                    ad:bc:9f:69:65:59:ad:0d:30:bd:68:d9:59:63:c1:
                    c4:6b:c7:dc:f1:99:39:35:e8:4c:10:e0:57:a1:d9:
                    7b:4b:30:5d:11:ac:27:21:62:52:97:88:c0:2c:d0:
                    36:10:ee:17:34:46:af:13:b8:68:1e:dd:cb:b1:59:
                    b8:e9:57:ca:37:83:31:cc:6b:f5:27:dc:07:72:c3:
                    85:a6:2a:f6:c3:27:b3:b3:28:e0:7f:c1:a5:ae:03:
                    fe:62:cc:22:dd:30:52:0b:b3:e8:f1:ab:b5:dc:a7:
                    e5:de:5c:5d:ab:ac:c7:55:76:88:79:d2:e4:7b:25:
                    a6:a2:af:d7:d7:45:e7:2a:fc:36:39:7d:51:6f:69:
                    6f:66:65:5c:cc:86:bd:af:f8:91:0d:bb:4b:25:60:
                    ea:f1:4c:d8:b7:d9:5b:8f:43:be:db:f8:86:9e:59:
                    28:cf:d3:2f:ec:c9:d6:65:2f:80:ac:e9:0c:c8:1b:
                    5a:e3:b0:61:6d:c3:fb:c8:f3:36:56:b1:62:e8:88:
                    75:2a:62:f7:c4:fe:01:a3:e5:d6:95:35:71:b3:ba:
                    60:a3:fc:e1:a9:e6:ae:91:b8:7f:15:fa:92:82:c3:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:44:F3:A5:41:98:87:3A:F4:98:98:E7:58:70:F8:B2:72:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.231.0.0/16
                  137.187.0.0/16
                  156.40.0.0-156.40.92.255
                  156.40.96.0-156.40.196.255
                  156.40.198.0-156.40.255.255
                  165.112.0.0/16
                  192.231.145.0-192.231.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:e6:68:70:89:1a:d3:10:23:56:c7:c2:eb:2d:29:53:80:
         91:21:79:5f:77:52:e3:18:00:1c:b3:8b:d5:c1:d0:42:8c:7b:
         87:42:26:39:6b:4c:fa:b4:2b:98:ba:88:e4:24:5a:0e:98:05:
         eb:75:f9:a2:13:03:44:84:6e:76:b9:13:83:24:b0:8b:74:19:
         80:3e:ba:4e:1b:26:24:dd:6e:db:9d:2e:36:ec:63:3c:c4:6e:
         81:18:d4:d9:fb:f0:77:5b:bb:eb:28:ee:6f:f9:cb:7c:76:9d:
         76:a5:c0:16:37:57:80:30:d6:94:ea:36:87:74:23:05:08:56:
         e0:5e:ed:6d:70:89:11:31:d2:c4:d7:a4:f8:5c:4c:ae:5b:5f:
         a2:f3:2d:66:90:8b:80:56:6b:18:44:79:d5:82:8a:30:66:a7:
         91:e4:21:5a:9b:21:61:60:8f:9f:47:db:84:10:42:75:d6:60:
         00:2f:3f:1c:d6:1d:d7:ff:2f:2a:22:7c:c5:6d:61:20:a7:16:
         d9:78:08:62:58:5e:7a:4c:50:2a:e4:70:30:62:11:6a:6e:41:
         3f:7c:69:dd:4f:45:ae:f3:1c:ff:b7:ed:5f:4b:0a:ce:f9:e7:
         6b:4f:13:36:88:4e:6a:e6:40:ea:13:b8:fc:66:1f:57:e4:31:
         42:d7:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:50:04 2025 by rpki-client