Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa
File:                     b1acef80-1c55-3848-91e5-434be008bdc8.roa (raw, json)
Hash identifier:          uK1mmRyf5M0jz6EpY2aa3jL9ds/z3mTnFv0fuzhLkUc=
Subject key identifier:   45:BB:26:7E:3E:49:5F:44:40:F5:7D:39:DD:D6:DC:06:7E:D2:0F:81
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584B5E57C5137A97099D5FAC6DA0
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa
Signing time:             Tue 30 Sep 2025 16:19:48 +0000
ROA not before:           Tue 30 Sep 2025 16:19:48 +0000
ROA not after:            Mon 29 Dec 2025 17:19:48 +0000
asID:                     14277
IP address blocks:        65.50.172.0/23 maxlen: 23
                          2606:8180:5800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:57:c5:13:7a:97:09:9d:5f:ac:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Sep 30 16:19:48 2025 GMT
            Not After : Dec 29 17:19:48 2025 GMT
        Subject: CN=484c252a-5a57-4589-adca-5d7e55acf93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:75:3f:c7:a3:34:ba:8f:e9:3c:4e:c0:c6:
                    6c:52:b4:4c:09:8f:ea:1e:19:f4:00:ac:80:1e:a6:
                    15:0c:5f:7a:d2:b5:70:be:62:ae:6b:61:9f:7a:c1:
                    51:31:cc:34:e3:d3:ce:ee:77:74:82:40:14:16:e5:
                    41:a6:a1:d6:94:64:76:ed:42:13:65:7e:48:f7:e0:
                    bc:e8:3c:1f:ee:09:f3:27:7f:7e:2a:8e:cb:df:7a:
                    be:e1:5f:67:10:a1:c7:a4:e0:e8:03:32:b6:52:76:
                    98:3f:a4:1c:64:50:8f:0a:f9:8f:f2:d8:f7:d9:e3:
                    36:c5:e1:04:85:c1:06:0d:07:2f:ee:11:af:7d:34:
                    bc:1e:7c:08:e2:ef:f9:a3:0e:57:42:cb:5b:17:39:
                    bd:04:b3:1e:c6:63:97:e5:df:17:c1:dd:93:81:f8:
                    46:fe:53:00:2c:bd:03:d5:67:47:2f:4b:5e:b9:10:
                    50:67:61:82:bb:58:5a:29:9e:79:78:e8:c4:f0:d2:
                    fa:d8:f4:f0:0b:61:7c:d8:45:e6:4e:c6:81:e5:60:
                    96:d2:b5:8e:70:9b:72:e1:72:fc:6c:ea:e2:0c:a3:
                    dd:fc:7d:2f:47:85:a5:bc:60:fb:02:fc:a6:a6:ed:
                    fd:59:f3:05:7a:ae:9f:63:b2:f4:01:d2:f6:0f:bb:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BB:26:7E:3E:49:5F:44:40:F5:7D:39:DD:D6:DC:06:7E:D2:0F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/b1acef80-1c55-3848-91e5-434be008bdc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.172.0/23
                IPv6:
                  2606:8180:5800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:3b:77:4e:37:3c:d1:f9:60:34:78:38:72:07:81:c4:09:
         31:4b:e4:12:a4:81:aa:8f:f4:0e:2d:e8:23:a2:43:a4:b7:6b:
         00:c9:06:50:f9:2d:96:a1:86:90:f8:86:4a:7b:2e:99:bf:49:
         7e:61:30:5d:51:b1:e5:20:5f:f9:02:f6:d3:23:ea:4b:e4:1a:
         cd:8d:4a:ee:9a:7f:27:23:16:1e:44:3e:37:45:4f:42:42:61:
         aa:4e:c9:aa:9e:b4:d9:6c:85:fa:46:c7:ff:65:bd:4c:1e:7b:
         e0:e5:d9:c6:8c:c7:9d:fe:42:e8:60:e8:8f:3d:71:ea:f8:eb:
         ee:45:ea:2e:4e:9f:0a:45:9a:5d:b6:cb:80:11:bf:d8:52:7f:
         dd:fa:84:28:7f:e1:e8:97:6f:6a:ad:b3:02:34:a6:d3:38:dd:
         55:68:36:4d:ed:80:88:e4:3a:88:d8:2b:4c:6d:22:c0:07:f8:
         a7:72:a5:e1:5b:04:0c:81:8d:70:4a:b3:d5:31:a3:dc:99:5f:
         7a:ff:73:83:b9:d2:e4:83:72:31:88:2f:17:5e:ac:95:34:7c:
         c3:b3:b6:be:b0:3a:a9:2e:f9:0f:27:a9:85:46:ce:4a:d3:8b:
         23:6e:7f:b2:12:83:e0:2f:1e:be:35:51:25:e8:0d:a2:c4:b7:
         b9:c9:af:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:42:22 2025 by rpki-client