Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa
File:                     bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa (raw, json)
Hash identifier:          4uDIy/uQZyZRqm6chZncrdf9frqxhaAnM7q8Kfau//Y=
Subject key identifier:   82:64:20:A9:CD:8D:85:47:31:25:F1:4F:0D:97:E5:99:62:CE:D1:08
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584B1C3752C043483A001EA09B00
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     11808
IP address blocks:        129.101.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:52:c0:43:48:3a:00:1e:a0:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9bdf9fdd-e3d2-43e5-b53d-13216edbe32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:a9:e3:22:ae:9f:09:2c:85:67:35:fc:30:
                    22:54:7f:27:6f:32:ba:ea:e2:5f:cd:97:52:db:89:
                    9b:06:15:8a:62:37:9a:bf:dc:b2:7d:e8:86:e3:09:
                    cb:75:bc:43:ba:c7:62:91:82:40:25:a1:5c:98:5a:
                    76:40:30:4e:01:9f:96:59:97:87:c0:f2:67:3e:d9:
                    5f:03:e4:53:b8:5b:be:50:e7:14:e2:a9:33:8e:f2:
                    e8:90:1b:4d:c7:d4:7b:65:ed:1b:47:31:c6:6d:59:
                    18:96:b3:cd:ad:3d:50:cc:6f:8c:e9:72:7c:4b:63:
                    21:be:29:83:43:92:e8:ba:6b:c3:03:e7:89:84:31:
                    70:4c:74:5a:87:5a:17:41:4f:ed:b6:1f:35:5d:93:
                    b6:99:64:8f:61:8d:2e:71:bc:1f:3c:eb:77:7f:fe:
                    02:87:8d:fe:43:78:0c:a1:6c:3f:1d:4e:5f:c5:8e:
                    59:a0:27:1d:10:9a:3e:fc:e0:cd:4d:e4:e0:78:ef:
                    63:ca:e7:f3:db:99:cf:a1:bf:88:f6:cd:46:c8:d5:
                    a8:e9:de:81:b5:7c:9f:81:0d:46:98:0c:b9:6d:fb:
                    bc:f6:d3:3d:e7:33:11:74:23:50:4e:fb:58:25:cb:
                    12:90:20:f0:7e:78:b2:f4:b3:d5:53:da:41:f8:03:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:20:A9:CD:8D:85:47:31:25:F1:4F:0D:97:E5:99:62:CE:D1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/bf452aa7-f8bf-3446-b88a-c0a902423bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:61:0a:bd:92:cf:96:bd:eb:7d:1f:fd:e1:99:1e:20:35:
         30:8b:a6:dc:90:38:0d:9e:3e:4b:65:dc:68:48:b4:34:61:3f:
         39:43:ef:35:40:88:9a:35:89:49:9b:55:eb:d8:d8:21:40:de:
         84:6f:22:a7:c5:63:62:92:27:a4:1b:a8:1a:ff:ce:85:c7:21:
         f6:01:ae:de:78:d7:d6:1a:b8:7d:ce:4f:9d:3a:80:d5:75:84:
         a5:ea:f1:67:e7:2e:3a:73:45:a6:54:e9:81:9e:38:11:ed:23:
         3e:ac:66:9d:de:24:53:c6:0b:bc:38:21:9a:22:af:67:c3:53:
         74:03:95:8f:6e:0e:4f:a7:bc:58:64:1d:2a:95:f5:3a:d2:d1:
         3b:73:c2:6b:00:db:ac:8f:a3:43:5c:21:db:9c:c6:e9:40:48:
         b8:ad:be:15:5c:34:5a:66:17:c8:fd:2b:e6:e7:43:ca:fc:28:
         32:b9:33:8f:6e:b0:95:c5:44:a8:4b:3f:c4:89:a9:71:c0:79:
         70:47:e5:14:25:af:80:03:5c:6a:f0:a0:ba:93:f5:27:17:62:
         92:f6:63:0f:4f:01:7f:e2:65:ad:50:97:19:2e:dd:bb:95:bf:
         4f:79:5a:10:67:69:b3:96:95:ba:1b:91:ad:88:c7:a0:f6:26:
         d1:1a:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:59 2025 by rpki-client