Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/48ccebc1-e56a-364a-a257-72209f8669e4.roa
File:                     48ccebc1-e56a-364a-a257-72209f8669e4.roa (raw, json)
Hash identifier:          8zS3o8G9zlxg0zgS+TSgUNHuSMk5jcXZx1AT93AlYMk=
Subject key identifier:   FD:D9:FD:61:FD:B2:99:08:D1:FC:38:8D:8F:9A:C7:5D:D2:CE:29:CA
Certificate issuer:       /CN=18fd692b-bd1e-4ad6-b92a-a1969fc25c44
Certificate serial:       010D0C9F4328584B6631EACDB54ECFBBB76A7700
Authority key identifier: 91:16:15:8B:75:66:FA:AF:41:69:12:EB:29:8E:FB:8B:FF:F6:78:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/48ccebc1-e56a-364a-a257-72209f8669e4.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     11970
IP address blocks:        207.162.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ea:cd:b5:4e:cf:bb:b7:6a:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18fd692b-bd1e-4ad6-b92a-a1969fc25c44
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=06c43ed8-9bd3-4daf-93e6-2307745f3422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:98:78:74:1d:cd:b8:f5:53:ee:1b:55:9a:
                    19:5b:2c:df:fd:74:53:72:2d:08:e7:3f:a7:e7:4c:
                    5d:1e:dc:23:57:4f:42:2b:27:b7:75:12:7d:09:b4:
                    b8:18:d7:91:5f:63:ff:82:81:99:8b:a8:67:af:77:
                    a6:0c:ee:cd:66:2b:e7:52:b3:02:57:bb:4a:c4:e6:
                    f3:a3:ad:ca:39:8c:81:a3:5e:b2:be:3f:0e:dd:a7:
                    3c:24:35:27:56:08:d1:45:97:a6:8e:42:db:4a:11:
                    de:86:ee:40:e4:0a:4d:7b:e0:56:01:db:50:cf:e1:
                    c5:a5:63:10:67:38:e9:2e:de:4c:b7:a7:fb:9f:46:
                    39:38:40:24:52:8d:7e:6d:f5:55:d4:9a:6f:59:39:
                    ee:4c:10:36:8e:7d:85:14:ca:86:24:b1:56:1c:cf:
                    3e:c5:0d:1c:dc:8c:64:c5:52:c1:f4:d8:1e:6f:8b:
                    b2:e0:29:d6:d9:f4:d8:21:24:c4:31:06:c8:e4:50:
                    fd:98:21:d1:b7:29:53:e9:12:6b:70:6b:18:30:ad:
                    92:00:96:dd:69:04:3f:bf:c4:e9:66:11:2f:e2:24:
                    38:57:ca:e8:08:c6:30:87:5f:d3:9b:10:52:94:bf:
                    f0:f6:96:f2:6e:17:95:50:ac:8b:57:b1:76:a2:cf:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D9:FD:61:FD:B2:99:08:D1:FC:38:8D:8F:9A:C7:5D:D2:CE:29:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/48ccebc1-e56a-364a-a257-72209f8669e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.crl

            X509v3 Authority Key Identifier:
                keyid:91:16:15:8B:75:66:FA:AF:41:69:12:EB:29:8E:FB:8B:FF:F6:78:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/18fd692b-bd1e-4ad6-b92a-a1969fc25c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:1c:d8:e6:99:28:7f:66:eb:8f:24:aa:63:60:2a:65:3a:
         55:5c:2e:e8:1a:ec:6e:3c:39:3a:98:a4:94:f0:f0:de:94:06:
         34:0c:1d:96:21:a0:c2:56:59:67:79:c3:9e:f1:68:af:03:92:
         84:4e:ac:dc:c9:32:86:4f:4d:58:f1:ad:67:aa:90:19:87:85:
         ff:16:f1:d2:fd:d2:f8:f9:9c:29:d4:57:b0:9a:5b:ab:a4:a0:
         0d:a0:8b:de:11:b6:ec:9f:56:f2:24:73:e2:d7:a7:e3:d2:45:
         53:f7:37:cb:91:4a:ec:84:24:88:14:c1:86:c5:81:6f:26:65:
         7f:09:01:b2:e9:c6:38:79:38:09:ec:43:e1:74:e2:af:60:4e:
         5c:5e:c0:86:97:32:3c:ef:0b:30:c1:6e:45:81:01:6c:68:ce:
         06:51:99:5b:9a:f9:ed:e7:5e:fe:53:d7:3e:d3:5b:81:12:93:
         8c:b2:92:b0:da:25:a1:31:b8:55:d2:83:6a:12:29:a1:87:39:
         d4:1a:22:46:f8:ca:48:18:85:4b:30:4f:fa:e2:c9:53:bc:0a:
         7f:12:d9:30:49:51:46:1d:45:13:86:53:c2:5b:bb:2e:01:3e:
         bf:d7:2f:9a:1d:7a:f7:03:78:aa:c2:6a:ca:33:21:73:fd:a5:
         4f:c4:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:15:24 2025 by rpki-client