Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa
File:                     79094ddb-1fdf-3853-a937-907b531c18c8.roa (raw, json)
Hash identifier:          JC9z+hyE0T7J69jH41wHV2SHg2M5XcAp/XZR8BsW4fw=
Subject key identifier:   D1:0A:ED:ED:CF:58:DB:0A:B4:7B:4E:CA:CE:F9:3A:C2:D6:8F:B3:C1
Certificate issuer:       /CN=a02fffee-5e21-4885-baa1-1caf716c51aa
Certificate serial:       010D0C9F4328584B477C705BAF2FEF34F6C6CF80
Authority key identifier: 44:DA:48:0F:C9:8E:A2:3D:8E:09:E2:75:CD:96:AD:7C:C6:9B:89:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     398801
IP address blocks:        155.254.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:70:5b:af:2f:ef:34:f6:c6:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02fffee-5e21-4885-baa1-1caf716c51aa
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=210841e2-46f0-4b3f-93ad-9461063929b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:71:d9:2c:43:7e:f3:35:e8:36:82:70:ea:
                    5d:c2:16:a3:da:d5:24:b4:99:34:8a:2c:4d:3f:1c:
                    96:61:c6:89:77:99:bd:0b:d2:6c:87:c2:6d:42:d6:
                    4b:1f:2d:4e:27:1c:53:8a:40:03:3b:1c:26:6e:78:
                    14:04:48:d5:38:3e:c6:8b:82:75:ca:b7:38:87:04:
                    93:af:72:d4:40:28:88:49:19:a8:e3:cf:92:0f:0e:
                    a0:47:76:ff:c9:2f:8d:f1:27:80:10:84:fd:bc:95:
                    d1:08:a2:95:52:20:16:88:84:fa:2e:28:3e:64:8a:
                    6b:0c:d7:c8:79:8e:7b:31:df:09:ca:8f:8b:f6:fb:
                    24:f8:44:77:7d:3c:da:0d:a6:a0:ce:9f:4c:c0:c5:
                    e9:71:f4:d8:c1:6d:45:6a:b5:44:98:5d:4d:07:97:
                    c0:27:28:46:d2:1a:dd:05:ad:0a:57:7a:9b:4a:34:
                    17:db:b4:6b:20:b5:93:67:fa:59:47:2e:93:04:72:
                    39:55:0d:6b:1a:6e:29:47:ad:7f:fc:a7:c1:b0:fd:
                    2a:85:11:2f:36:b8:e3:39:b2:20:cb:53:43:f3:7d:
                    b0:63:0f:7a:9d:5a:9a:59:31:99:66:22:33:d3:07:
                    53:50:d5:6e:14:c2:89:25:8f:b1:77:02:b8:5c:c9:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0A:ED:ED:CF:58:DB:0A:B4:7B:4E:CA:CE:F9:3A:C2:D6:8F:B3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/79094ddb-1fdf-3853-a937-907b531c18c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa/a02fffee-5e21-4885-baa1-1caf716c51aa.crl

            X509v3 Authority Key Identifier:
                keyid:44:DA:48:0F:C9:8E:A2:3D:8E:09:E2:75:CD:96:AD:7C:C6:9B:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a02fffee-5e21-4885-baa1-1caf716c51aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:87:71:b8:d3:65:e2:6e:79:b7:a8:0a:81:d4:33:b0:e4:
         5a:5f:b1:ec:69:3d:1f:c9:d1:a5:f6:fb:ec:7e:fb:bb:f6:6f:
         28:c6:ab:71:39:00:69:cc:ab:ab:27:2b:f8:ca:b4:4c:87:9c:
         9f:9e:56:37:81:92:de:b1:d7:98:39:f5:49:a8:08:e1:45:41:
         b2:0e:41:63:5d:83:4f:a9:d2:eb:9b:2c:da:7b:de:5c:f1:c1:
         57:5f:cf:30:b2:94:a4:19:25:3c:1c:b7:f3:f2:bd:fd:83:cc:
         39:75:61:70:8a:8a:5f:6f:17:54:24:36:f2:cc:50:6e:3b:1d:
         7a:c0:22:ea:60:e8:d6:a4:72:23:93:a0:f0:e7:e0:42:a1:cf:
         9b:c2:dc:c2:bf:1e:56:22:1b:55:88:30:57:54:8a:fe:55:16:
         3d:06:8c:a7:eb:39:a7:22:3a:9d:8a:0d:7a:98:50:c1:8c:cc:
         3d:8e:96:8e:95:dd:a9:9e:c6:6d:15:99:90:32:29:4c:38:ae:
         d4:cf:17:de:3c:d9:32:f3:59:4c:2c:98:27:7a:30:09:1e:83:
         37:5b:4a:71:09:ba:c0:51:35:dd:2b:c2:db:38:a8:41:09:b7:
         43:27:ef:ae:3f:44:c4:94:de:1d:0f:8c:f6:64:ed:16:30:43:
         39:b1:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:38:45 2025 by rpki-client