Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa
File:                     18f3acc0-115f-3d01-8d63-31d6a3695f65.roa (raw, json)
Hash identifier:          0Ae2guld2FU2qunM7IhfnhKUHwokxjck1OF24Mnz+U8=
Subject key identifier:   43:92:E9:94:F8:02:42:38:4C:60:D6:80:79:2F:29:6E:AF:78:45:8A
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584B43F676FA3E3F68D559035640
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa
Signing time:             Sun 21 Sep 2025 06:43:27 +0000
ROA not before:           Sun 21 Sep 2025 06:43:27 +0000
ROA not after:            Sat 20 Dec 2025 07:43:27 +0000
asID:                     10794
IP address blocks:        199.201.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:f6:76:fa:3e:3f:68:d5:59:03:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Sep 21 06:43:27 2025 GMT
            Not After : Dec 20 07:43:27 2025 GMT
        Subject: CN=454c8b7d-21c6-4879-9f7e-c5c1990da50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:4a:93:9f:47:31:2c:42:ce:14:34:40:52:
                    1d:8c:17:98:b0:43:f1:7b:fa:fd:85:ae:7e:9e:14:
                    bb:54:c6:0f:11:58:bd:70:2b:0a:6b:c3:10:e0:a2:
                    8c:fa:90:68:ef:1a:b5:51:38:e1:cb:12:7d:83:27:
                    bd:8f:e8:0a:f9:77:ca:6c:1c:97:1a:cf:24:7f:19:
                    89:34:90:db:d4:d4:41:63:7c:14:a5:16:74:9e:8d:
                    d4:d6:a7:ca:72:9f:da:ba:cb:c1:d0:72:a2:d4:1e:
                    09:8b:6e:39:85:cb:55:b1:92:d5:9c:c2:90:7f:71:
                    28:b1:17:e2:3e:bc:a6:1d:62:be:27:56:cd:a8:05:
                    5a:69:dc:31:07:a7:91:90:0d:12:4c:14:4d:c3:78:
                    33:ab:fa:f1:f0:3b:f2:04:57:73:6e:3e:5b:1c:74:
                    5e:db:38:63:54:97:2e:79:a4:0d:92:ed:77:54:ba:
                    c3:ae:16:81:1c:55:dd:96:9b:b3:e9:2a:73:d0:8a:
                    5a:e9:3f:ac:2d:1e:cd:1c:13:84:eb:72:97:c0:e1:
                    47:44:e3:8c:db:09:1e:46:45:f0:a4:99:16:a0:7d:
                    bf:2a:b7:72:7f:bd:1c:05:43:23:0c:5a:40:19:c4:
                    0c:48:a2:61:37:d3:40:cd:8c:15:97:fa:ed:a2:8a:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:92:E9:94:F8:02:42:38:4C:60:D6:80:79:2F:29:6E:AF:78:45:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:ae:1f:ff:68:e1:3f:10:d0:e6:a9:af:9f:01:1b:4f:95:
         78:50:c4:5a:57:2d:54:b2:3f:23:e7:3f:80:b2:f3:33:3a:82:
         6d:85:8e:20:99:26:0a:6c:a5:f5:7d:c9:64:a3:4d:b8:d0:52:
         fa:3a:2b:3b:b7:b5:bb:62:fd:b0:61:36:d5:d7:33:48:b5:31:
         9f:66:13:29:50:4e:05:69:85:c4:71:26:ec:54:30:df:fd:0c:
         05:12:de:d4:c9:66:ff:7c:00:55:8e:c2:2a:6f:7c:42:ce:f4:
         4c:eb:0a:cf:71:77:7d:95:22:53:8d:33:ef:f0:b4:39:f9:01:
         bf:d2:93:3c:61:ff:2f:de:88:12:e1:21:ec:9f:97:7d:83:12:
         06:28:d3:bb:51:ee:c1:b0:58:3e:e1:b8:f2:33:0a:13:e6:26:
         3c:12:f4:b6:af:48:82:fa:a1:2e:d8:6e:de:08:b4:39:c8:6e:
         81:ae:35:c1:39:17:ca:f1:fb:82:20:ff:ee:1c:bb:6a:8b:ad:
         65:77:d7:79:21:d0:5d:a8:a8:72:ee:0e:43:31:5e:2b:cc:44:
         d9:1b:f0:a4:d8:65:fe:fb:5b:09:08:62:05:dd:fd:30:46:ad:
         0e:80:3b:4a:77:06:fd:69:de:96:9d:dc:46:8f:46:00:c5:b7:
         01:21:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:15 2025 by rpki-client