Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa
File:                     a08bb5f5-0230-374a-a51a-b761cea58493.roa (raw, json)
Hash identifier:          IZ/EmZqMEm29UCriDpmGdr+jOzBhb/Z6FpvyHBTxCbY=
Subject key identifier:   88:1F:C6:42:1A:15:F3:E1:CC:02:58:49:CE:ED:C8:29:20:D1:AF:D6
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584B63674E4ABC764EB07D6DD1C0
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     10384
IP address blocks:        152.87.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4e:4a:bc:76:4e:b0:7d:6d:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=f7b58777-9735-485b-838b-2bb63f7a1f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:60:66:7a:49:bd:61:dd:d7:5c:5d:f5:1a:
                    e5:f0:0b:19:0b:36:c4:8c:80:73:e1:af:a9:79:53:
                    2b:39:1a:16:9b:50:3c:12:dc:dd:41:ee:dd:b5:74:
                    c2:5f:44:58:38:67:c0:93:0d:d1:8b:f1:52:09:c6:
                    2a:9c:bc:b2:3b:17:5f:b7:ab:95:a2:6a:38:b0:a6:
                    56:05:45:c6:f7:9f:97:95:14:31:fe:8c:c2:b1:40:
                    61:0a:e8:3a:25:79:1f:ea:8e:83:6a:9e:bf:57:40:
                    45:5a:e6:98:72:f6:a5:5a:5a:c5:32:0a:18:c7:c7:
                    e7:33:0a:e3:b2:ed:c0:01:07:44:2e:66:55:56:83:
                    f3:43:b4:f2:1a:59:34:60:95:e2:5b:30:2c:0e:cb:
                    44:8f:25:ea:b2:70:6d:4f:7c:56:ca:b1:a7:dd:d9:
                    7a:4a:7a:94:9d:d2:09:47:e9:9f:9b:76:27:6a:45:
                    d5:16:ac:6c:76:e8:e0:00:25:e3:e9:30:18:be:dd:
                    a7:bb:b3:67:5c:5c:43:21:7b:e8:9d:18:18:73:03:
                    56:63:e7:83:22:7a:b6:0b:1d:01:f8:71:54:0d:63:
                    9d:75:2d:7c:f8:93:5c:6a:6c:fd:6a:5a:d3:5a:67:
                    5b:b8:66:3a:39:09:4b:1d:cd:9b:28:ef:f4:d2:d7:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:C6:42:1A:15:F3:E1:CC:02:58:49:CE:ED:C8:29:20:D1:AF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:c7:9b:9c:f8:72:f7:a6:be:d1:82:88:9d:d6:3d:66:10:
         66:6d:14:27:d2:4a:d3:30:a3:5a:1f:3d:80:01:a4:ed:b8:58:
         95:44:a4:f8:4c:38:40:96:ac:bf:a4:06:a5:f3:37:58:33:83:
         3a:a7:ab:76:3b:9c:73:eb:32:97:38:90:08:82:7e:c3:73:f8:
         c4:e8:a6:56:7c:b7:85:d2:3b:0c:8a:88:3e:8e:12:72:3a:e7:
         c6:3f:96:25:ce:35:e7:f3:5c:5e:9f:23:e3:9e:56:96:75:cd:
         8f:00:6e:2b:67:15:34:99:19:6b:93:e5:f0:ea:70:be:3b:12:
         38:9e:d3:33:cc:ad:b6:c8:6d:08:91:4d:c5:38:c3:7d:5d:e4:
         d2:b3:2e:e8:7c:6f:e1:5d:b4:11:a4:d7:55:0f:0d:e3:77:6b:
         3a:2e:6f:e1:b6:a4:52:3d:45:24:22:d8:a5:72:e6:0b:bb:b8:
         d4:5e:37:0e:81:b3:4c:6d:30:4d:17:7c:4f:de:5f:7a:f4:42:
         a1:fd:f7:72:d5:59:e2:94:84:bc:ae:7e:32:d4:18:4a:46:ac:
         e8:05:49:a4:c6:4f:1d:d3:d2:ad:2c:a0:7b:d0:c5:c3:ca:3a:
         89:67:12:38:5d:54:2a:8e:ec:b2:9f:11:5b:0b:e6:36:1a:a8:
         71:d1:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:45:22 2025 by rpki-client