Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
File:                     921fd0ed-93df-36db-807d-72ec839c9541.roa (raw, json)
Hash identifier:          VHIw0tM6qcPhqukxxAtmJwWbiDdEzT8LKYALbGtC92E=
Subject key identifier:   F9:8E:15:F6:32:6C:18:0C:24:80:D3:1A:DD:30:D6:5A:B5:30:27:EE
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F4328584B5DD209984568F93EADC49880
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     14537
IP address blocks:        162.250.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:09:98:45:68:f9:3e:ad:c4:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=81be12b3-afc9-4800-9b60-a59f14f24ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:2c:6d:6e:c0:2f:17:ed:46:ac:71:c4:d4:
                    49:76:c8:c2:90:f2:87:51:b6:90:c7:b0:9b:98:60:
                    54:69:42:9f:8c:95:a2:3e:0c:d1:a0:2e:43:e1:d4:
                    35:a8:b8:cb:75:fd:d1:8d:63:3a:f6:54:f8:f7:bc:
                    8d:0f:72:e2:f4:20:88:6d:6d:b4:1e:cf:a1:79:11:
                    49:b5:45:4a:8f:b7:28:50:d5:b3:ff:a1:fc:14:e3:
                    6e:df:e3:72:b2:65:3d:46:95:b4:a9:23:48:bd:e8:
                    c6:d2:85:d0:96:dc:a3:e8:98:07:6f:cd:a9:16:14:
                    e7:1e:de:e6:37:0d:1a:6d:fd:1e:d7:7d:0b:04:3c:
                    a7:4b:7d:2d:46:3e:50:24:94:64:b8:b4:ef:4a:74:
                    a4:ee:36:1e:b7:65:1a:a8:5f:4b:6b:6a:13:b9:52:
                    f2:ec:e0:5e:87:44:85:d7:59:94:da:e6:6a:0a:87:
                    a7:58:d8:11:7e:6e:b6:09:2d:d1:7d:63:f2:81:65:
                    25:34:4d:98:73:bf:d1:39:87:1a:b3:f0:49:a1:7a:
                    21:c7:f2:02:97:42:6f:61:b9:67:64:48:48:71:8e:
                    2f:ea:a7:28:1b:07:24:6b:56:71:5c:cf:df:09:49:
                    a2:0d:15:89:2b:37:ac:10:a3:b0:96:2b:08:fd:ef:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:15:F6:32:6C:18:0C:24:80:D3:1A:DD:30:D6:5A:B5:30:27:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:46:12:fb:d1:7b:41:07:a8:2b:9f:bd:f2:31:5c:ed:e0:6b:
         d8:b5:a4:6c:6d:03:74:7e:13:fc:9b:bc:a4:29:26:53:bf:2f:
         44:f1:94:05:54:e6:f3:6e:f1:e0:ab:b1:c5:4b:3d:ab:df:89:
         b3:ee:27:42:e6:ef:cb:7d:a3:89:63:7b:25:e3:ed:d1:5d:b4:
         18:97:1e:cc:9c:6d:96:0c:59:71:30:54:29:7d:6d:17:da:85:
         02:a1:e4:21:b1:f6:fa:ab:1f:58:66:44:4c:eb:27:ac:0f:56:
         03:60:17:a9:f5:3d:47:a6:b6:1c:26:60:b7:01:9e:24:f2:43:
         ed:5b:a4:14:b4:b2:f9:f9:71:5d:2e:0c:24:d6:86:c0:cb:5f:
         f4:b7:91:f4:6e:2c:53:6d:b5:b3:98:89:b8:1e:e5:65:13:3e:
         df:28:a4:e7:a7:8a:3a:c7:79:7e:ac:ad:a8:b3:5f:41:58:03:
         25:da:3d:bd:51:d4:58:8b:4b:74:2f:4a:1c:34:a4:e0:5e:4a:
         58:b0:50:3c:88:38:66:0d:01:0b:ea:9d:ac:46:f7:40:96:d0:
         be:8d:fa:29:cc:6e:06:7a:23:09:ab:67:7d:f3:14:2a:c4:1d:
         ac:fa:49:bf:59:73:84:84:7d:f5:50:e1:93:67:09:7e:20:39:
         50:e7:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:18:33 2025 by rpki-client