Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/1fbd35cd-321f-3dc8-ac60-f45225867bf4.roa
File:                     1fbd35cd-321f-3dc8-ac60-f45225867bf4.roa (raw, json)
Hash identifier:          AVA8NwT09g7QRcCHRi4KtdcJ0ruQszhshEjYowW6ygU=
Subject key identifier:   51:E6:33:49:23:AC:DB:65:0F:D9:55:A7:28:D4:60:3B:93:45:56:60
Certificate issuer:       /CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
Certificate serial:       010D0C9F4328584B84E76C8889EE5EEE72F7B8E0
Authority key identifier: C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/1fbd35cd-321f-3dc8-ac60-f45225867bf4.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        198.178.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:6c:88:89:ee:5e:ee:72:f7:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=73c0d8ef-709c-4809-b643-bd26fa1c1fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:04:c0:1e:fd:40:18:dc:e8:62:e8:be:ed:
                    8b:32:50:e0:6d:d4:0d:10:d2:e5:85:41:01:ed:b9:
                    ab:e3:1c:b7:21:6d:97:49:9b:3e:d4:a4:5f:28:83:
                    bb:88:03:9c:1b:c8:6b:23:cf:8c:7b:07:d7:f8:c8:
                    a7:0b:1e:45:67:75:0c:c3:2a:6d:7b:8b:e8:a1:7f:
                    84:af:c6:5d:31:54:e3:73:10:ab:cf:37:00:2a:4d:
                    b8:17:f9:4b:9e:22:ef:df:bc:a6:da:40:58:f0:a0:
                    24:9c:23:3d:36:47:52:6f:56:a6:36:b6:c5:76:4d:
                    f4:c3:f7:02:a2:68:63:25:d8:42:b3:27:27:c9:fe:
                    06:6b:0e:30:72:ae:b1:fe:8c:e2:3a:2b:8d:0f:d8:
                    1d:84:11:a8:9e:fa:fc:a4:05:69:02:02:db:54:44:
                    45:54:f9:78:a7:1c:b8:7e:3c:1f:6b:72:13:ce:98:
                    9d:a0:bc:08:cc:da:1c:d8:5a:73:45:72:e6:8c:79:
                    8d:13:4f:d5:ad:96:ab:97:ac:52:21:90:d9:fd:99:
                    71:95:c5:6a:2c:b7:c3:63:c9:63:bb:1a:f9:ee:a6:
                    e4:15:01:8f:f8:8c:39:a7:e9:9f:c3:09:11:c2:8f:
                    4d:80:7f:02:69:34:18:48:cd:c0:21:c3:ae:0c:05:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:33:49:23:AC:DB:65:0F:D9:55:A7:28:D4:60:3B:93:45:56:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/1fbd35cd-321f-3dc8-ac60-f45225867bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl

            X509v3 Authority Key Identifier:
                keyid:C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:ca:e6:3e:dc:e1:e6:a9:b2:96:74:0b:74:88:0a:cc:75:
         9d:a5:17:9d:bb:79:9f:62:4d:12:3c:93:0c:a1:92:b9:c7:49:
         af:1d:de:fa:7d:dc:9a:44:d5:51:b9:d3:64:9d:8a:d4:8b:37:
         d5:00:4a:f2:36:68:ed:1d:26:ba:88:e0:d2:53:17:1a:96:1a:
         7d:e8:08:56:38:82:e0:aa:53:f2:9a:73:58:13:f9:88:91:c1:
         25:35:0f:a2:ee:bf:03:ff:14:dd:0d:b7:8a:4a:5d:72:2f:d0:
         fb:7f:fb:8f:55:36:24:2c:31:74:40:1e:80:d8:15:17:72:10:
         f7:f4:73:48:65:90:aa:a8:3f:bd:2c:8c:89:89:b3:b6:3b:2e:
         39:f3:32:12:55:c4:e5:9b:b6:5a:99:9d:e8:30:e0:cb:2e:d0:
         45:1d:02:07:84:9d:13:fe:4e:58:0d:24:21:d7:36:74:33:96:
         18:67:2c:bc:66:13:b1:ca:7b:78:c7:d4:ab:72:d1:03:ab:65:
         da:1b:8f:88:f3:10:e8:e1:d5:49:08:19:6d:72:9a:3e:3d:32:
         4b:c6:63:94:7e:ee:78:fa:16:02:1f:25:c9:84:84:3f:f0:95:
         1c:ba:ae:12:74:d2:66:0f:70:b4:b9:1e:71:d5:d0:80:ba:7e:
         11:9c:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:49 2025 by rpki-client