Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/8eaf7756-e2df-3c74-a89b-0577b9386d0c.roa
File:                     8eaf7756-e2df-3c74-a89b-0577b9386d0c.roa (raw, json)
Hash identifier:          26CwLiN7hBGfL6wawGkuu4avpQ2/dscph/Za253jueg=
Subject key identifier:   68:27:97:BC:26:7E:70:E0:58:40:C4:43:62:DB:4E:FD:C0:92:70:4A
Certificate issuer:       /CN=c55a5d2a-aeae-4e6a-9701-cf97fa6eb571
Certificate serial:       010D0C9F4328584AFAB68BE6B35E3EE1F9F319F0
Authority key identifier: 74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/8eaf7756-e2df-3c74-a89b-0577b9386d0c.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     16989
IP address blocks:        199.164.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:8b:e6:b3:5e:3e:e1:f9:f3:19:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55a5d2a-aeae-4e6a-9701-cf97fa6eb571
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=421d4cb9-3a78-4c97-8450-279ee4ad9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:8f:ea:88:a9:4e:72:b0:16:95:7a:4a:98:
                    c6:d8:78:4c:de:15:63:ca:b1:6f:aa:b0:44:d1:c3:
                    41:d1:d2:82:43:b3:09:80:52:59:f6:66:9e:ec:5e:
                    d0:2a:f6:60:a0:d9:41:c9:ba:53:21:ca:1d:55:d6:
                    2a:03:b1:7d:e9:52:c1:3c:3c:cf:0a:ff:e5:9c:a8:
                    d7:2c:98:72:de:81:c2:da:99:50:c5:6c:cf:53:f0:
                    c7:ea:3e:3c:da:b6:0f:47:33:61:0f:d7:e1:7b:1b:
                    c0:fd:b2:96:ae:87:37:d9:e6:d1:9c:1e:02:ca:41:
                    ff:0e:b5:71:8c:02:62:20:bc:2d:18:05:b7:ab:fd:
                    46:3a:3c:b5:a0:78:84:6b:02:3d:12:ed:99:61:36:
                    28:40:a5:6c:82:d1:ab:29:88:31:8a:1d:e5:70:ff:
                    5e:a6:59:8f:5b:a0:82:59:70:08:5a:b2:f2:6d:af:
                    5d:97:36:f6:3e:49:41:4c:10:52:40:b1:5f:b3:5d:
                    ce:83:a4:72:f5:40:71:1b:27:b6:fe:55:54:4d:ea:
                    c8:4a:a0:3b:4a:68:64:b5:94:7d:f5:bf:ae:5e:40:
                    25:04:34:4e:ad:7c:b6:90:e2:d0:d2:98:ff:0d:1c:
                    30:0a:74:e1:df:65:89:af:1b:b0:2d:8f:9f:c3:40:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:97:BC:26:7E:70:E0:58:40:C4:43:62:DB:4E:FD:C0:92:70:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/8eaf7756-e2df-3c74-a89b-0577b9386d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.crl

            X509v3 Authority Key Identifier:
                keyid:74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.164.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:c6:30:8e:7f:61:1a:6e:75:e3:29:0f:b4:85:74:ec:c4:
         88:ee:be:94:1a:f0:08:40:58:cc:e8:d0:a3:81:48:07:84:c8:
         c6:08:7d:64:fd:cc:ba:51:89:c3:92:70:5b:80:a5:c7:0a:f4:
         1b:8f:59:06:cd:52:00:a0:8f:bd:8c:27:3b:75:c1:10:c2:5d:
         cb:56:92:9c:a5:2d:4e:0d:37:ae:65:d4:4e:07:0e:55:84:ab:
         d5:bc:71:4c:9c:9c:1f:66:39:5e:39:8e:48:37:e0:fd:58:07:
         9e:fd:c0:13:c0:43:34:76:6d:87:00:04:91:68:4c:f1:ae:2d:
         52:34:00:51:08:ae:78:17:2a:11:a6:a8:a6:61:1d:b5:98:be:
         33:c0:89:e6:02:f8:e9:90:2f:b3:14:4d:e7:2d:37:b7:18:b9:
         33:ad:a5:e9:a1:da:5d:73:33:6c:a3:a9:2e:d9:de:67:dc:57:
         c9:d5:0d:79:b4:42:ad:9c:61:86:fe:71:31:a2:9d:16:4f:ee:
         51:9e:dc:fb:af:11:4a:15:27:78:b4:f6:f8:01:05:71:58:1f:
         43:b7:6e:d5:c5:5b:05:87:7b:25:23:84:de:05:84:28:12:6b:
         f1:72:b2:9e:b8:51:08:53:04:af:9e:f0:0d:6b:37:fc:1e:2e:
         26:75:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:30 2025 by rpki-client