Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa
File:                     bb934193-35d7-39e0-92e0-ab84555335f4.roa (raw, json)
Hash identifier:          5rMDUwYSF5qXTwHy8/lMqpxqqI3QyYiLB1xBbUHDnDA=
Subject key identifier:   5E:28:64:59:BF:25:07:A8:B9:40:0D:46:DA:3D:2C:71:C5:C4:E5:FB
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584B3DB6EEAA692E9FFF20385520
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14277
IP address blocks:        65.50.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ee:aa:69:2e:9f:ff:20:38:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1bef68d1-3145-4765-a72f-c18c7e7f402b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:1b:79:49:c2:36:99:08:7a:94:27:6b:f2:
                    bb:ef:67:10:1d:98:01:15:b9:56:78:51:99:86:f3:
                    7c:ac:2c:f0:08:a8:87:d1:f8:d8:1c:7f:14:46:ac:
                    9c:30:24:2e:96:55:e0:0b:c8:38:1f:d5:7d:12:03:
                    3f:0b:0e:2d:68:a5:d0:41:aa:0a:93:69:f7:d4:9b:
                    da:7d:f6:67:f2:91:bb:1f:9c:6b:91:34:fc:0c:f4:
                    4f:82:48:09:50:f8:95:b8:6c:ad:d5:cc:d2:7a:ec:
                    39:6a:56:02:5f:0a:aa:03:96:62:fb:3e:52:f7:bb:
                    8c:18:02:7d:f4:4e:93:3b:a0:ea:ad:db:2e:18:0c:
                    bc:68:4e:a9:92:75:9b:32:c5:c7:c3:ae:0e:f1:9f:
                    58:52:18:ae:83:11:7a:1d:3a:6f:13:e8:7c:5f:5f:
                    2a:fa:bc:cd:87:b1:a3:da:f1:d0:ba:64:d2:28:39:
                    a2:a3:e4:d7:54:b3:64:5d:0a:66:50:c2:9e:26:16:
                    fe:1e:33:f5:0d:10:80:fc:9c:90:66:de:16:3d:dd:
                    e8:1f:2d:30:09:be:bc:ec:bb:60:b4:f1:0a:2c:e3:
                    6f:c4:c1:af:9d:a4:a8:7b:99:ce:92:66:0f:ca:84:
                    d1:99:2a:a7:58:b8:bc:1c:e2:1a:87:1f:f2:55:a4:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:28:64:59:BF:25:07:A8:B9:40:0D:46:DA:3D:2C:71:C5:C4:E5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:8d:14:1e:db:34:b4:8e:a8:f1:e1:da:79:29:3a:94:d1:
         e0:df:e1:e1:6e:94:73:80:64:30:1e:70:d1:43:8d:74:cc:66:
         41:6c:57:37:42:e8:71:82:52:c1:1d:18:6c:1c:24:6c:28:c5:
         6b:92:03:06:17:96:90:4f:ac:7a:df:4e:5f:2c:b6:16:ef:7c:
         0a:aa:94:f4:d0:31:aa:f0:03:07:36:c4:a3:f2:be:e3:09:00:
         c1:86:f2:41:02:6c:91:10:77:9b:a3:23:fa:e1:b3:12:dd:24:
         af:06:3e:ee:9f:a1:f7:ab:c7:df:42:55:02:33:30:59:aa:12:
         60:e7:75:31:07:00:ba:b4:d5:6e:4d:ce:80:1e:71:4f:89:47:
         b2:6c:90:e3:19:e5:80:a9:c3:32:ac:72:97:05:ab:ec:75:e3:
         74:d1:45:ac:7d:52:77:b8:67:42:97:84:68:8d:f7:60:29:f6:
         25:77:42:bb:0d:34:f6:30:81:cd:3d:aa:9b:f9:a9:3e:2a:cb:
         3b:30:27:8d:4e:02:0d:67:ea:1e:d9:b7:cc:c2:64:7c:47:e3:
         3d:a0:18:9d:07:01:db:a6:4a:ef:7a:c2:e7:27:3e:af:d0:ba:
         09:8e:f5:24:28:ee:b7:61:58:dc:3b:c9:1d:9b:96:94:2e:c1:
         4b:7f:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:24 2025 by rpki-client