Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
File:                     81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json)
Hash identifier:          XRHT9rkqVTq7vlP1v3e2CSl0X1OFhmKQlnCxiNZCV+M=
Subject key identifier:   1D:38:10:06:71:8C:7A:9B:C8:55:9F:3E:9E:A9:13:88:9D:18:A4:D0
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F4328584B8BE2229B43175512BD9C9620
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        198.137.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:22:9b:43:17:55:12:bd:9c:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=9fa10f9b-6466-4dd6-bf75-72b7f4c51d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:41:9b:97:85:06:ff:b0:98:5d:da:0c:9a:
                    26:d8:8d:0c:34:53:17:8a:b2:2b:30:07:a8:bb:15:
                    76:cb:67:61:64:c6:21:5e:00:13:0c:87:37:26:1f:
                    db:37:c9:4d:3f:af:e3:af:35:50:e2:42:0e:62:90:
                    dc:41:c5:ea:c5:77:21:65:5f:c4:2d:8f:1c:46:3d:
                    d6:cd:ff:13:9e:a8:c4:1a:e4:32:78:03:a3:61:bf:
                    fc:e6:6f:39:9d:ab:cb:9c:01:61:6f:35:8c:1a:f1:
                    9d:fc:49:e3:49:9d:72:01:1f:59:21:d1:16:25:a3:
                    80:9c:66:67:42:22:22:87:e0:43:ad:8f:4b:25:12:
                    fa:c5:97:9b:48:0a:6e:bd:50:d6:a6:d3:ef:0d:a2:
                    99:db:ff:0d:48:de:48:5c:da:c6:a5:f5:f9:fc:a9:
                    3d:38:0c:b0:72:5d:df:b2:f2:08:b3:ba:e8:3b:4c:
                    a2:fc:98:f8:a3:f7:20:46:df:bb:6c:b7:0e:fd:16:
                    16:b7:01:fb:0e:27:08:93:03:c9:e8:90:45:73:56:
                    64:66:83:ad:f5:7d:18:45:f2:15:e1:50:a1:28:8b:
                    22:cf:d4:2e:f2:b4:1b:47:97:6d:03:4e:6d:72:37:
                    79:ce:ab:eb:b7:07:69:f7:3b:68:3a:bb:2c:b3:bb:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:10:06:71:8C:7A:9B:C8:55:9F:3E:9E:A9:13:88:9D:18:A4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e8:f0:30:ea:2a:ac:cb:f5:d6:19:45:3e:81:ff:99:e3:42:
         f0:72:94:1f:bb:d3:0d:47:f3:28:90:7c:2b:36:33:64:8e:81:
         60:5d:37:bc:4e:e5:2a:b9:68:3a:79:6a:d4:6d:fb:13:38:05:
         dd:d5:6e:02:3e:21:8b:f7:cf:27:d4:2a:8e:f7:53:ec:61:00:
         cd:e4:ed:6a:bc:b9:5a:9f:4e:7c:19:3e:e1:22:46:0d:8a:00:
         ee:62:ad:b7:8f:58:78:cf:06:ee:7f:d5:8a:a5:30:9a:5f:d6:
         bd:7a:7e:ad:ed:f6:30:1e:45:19:dd:9e:30:08:05:09:be:97:
         1f:31:8b:78:8f:9b:d8:5b:a1:c8:4b:09:ca:0c:af:98:99:85:
         49:c5:35:55:f6:4a:81:e1:7e:41:74:7e:92:99:55:f6:f6:eb:
         8c:c4:16:09:17:70:17:38:9f:89:8d:d9:40:5d:7e:f7:71:45:
         29:b4:5c:3f:8c:f1:23:c6:04:b1:ff:a1:f5:4c:f9:03:2b:93:
         37:26:9d:4e:d7:f4:69:e9:0e:a2:43:d4:cf:ad:8c:7c:ca:37:
         7e:7e:ee:44:3a:39:5c:8a:9f:dc:68:f2:1d:ad:46:a6:c0:ab:
         2b:b0:ef:d8:c3:b4:d4:3d:23:83:b3:76:23:69:08:d5:92:de:
         52:d8:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:35 2025 by rpki-client