Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ef9cbf-e5b2-3825-9ab3-3f18c5f4c537.roa
File:                     10ef9cbf-e5b2-3825-9ab3-3f18c5f4c537.roa (raw, json)
Hash identifier:          MEgeNf6gp3xW/G76fGUrz8s49PqLOZzm5GzRSvveHkI=
Subject key identifier:   03:AF:F1:46:E1:8F:C3:65:70:38:06:E9:99:45:68:CB:30:9C:22:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B6BC7505121DD48A909E76020
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ef9cbf-e5b2-3825-9ab3-3f18c5f4c537.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     16625
IP address blocks:        184.31.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:50:51:21:dd:48:a9:09:e7:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=2b37f538-8284-47c9-ae17-7e5032dc3a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:5a:db:df:ef:80:07:5f:80:8d:0e:ff:5a:
                    7f:9f:8f:c4:bb:d1:54:d6:01:ec:f6:74:a5:47:0f:
                    a3:15:7d:c4:79:7f:cb:e4:dd:d3:28:a9:6b:c1:15:
                    a2:ce:6e:1d:5e:30:24:97:79:df:11:87:6f:1c:97:
                    b7:82:99:c6:ae:aa:4a:d1:42:fc:5b:79:8b:a6:49:
                    d0:d0:76:5a:21:63:7e:6d:17:b1:81:8b:d4:38:69:
                    82:9c:68:e3:7b:50:d6:6e:04:41:c1:dd:e3:90:ff:
                    31:92:71:e2:cc:b5:b5:66:02:79:4c:38:97:94:55:
                    d4:26:87:35:a7:ac:b3:0e:ed:82:fd:16:9b:08:dd:
                    38:d8:b1:02:25:fd:6b:76:ef:e8:9a:2e:a4:3d:dd:
                    ff:b8:ae:e5:5e:4b:5f:53:55:47:a2:d1:b6:23:c3:
                    6d:98:79:f2:15:d7:cf:cb:3c:c5:bc:c1:29:f7:c3:
                    0f:4f:c5:3c:e8:04:59:e8:12:c0:18:fd:95:3b:34:
                    dc:73:f7:47:24:3e:47:95:16:6c:ae:75:38:1e:52:
                    99:b2:78:77:3f:4b:2f:c8:12:1f:93:fc:35:b8:8c:
                    75:80:bd:92:6a:99:86:1f:50:e4:f3:53:ac:f3:69:
                    cb:68:aa:bb:2a:be:cc:ae:d0:ee:cd:f5:d1:96:66:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AF:F1:46:E1:8F:C3:65:70:38:06:E9:99:45:68:CB:30:9C:22:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ef9cbf-e5b2-3825-9ab3-3f18c5f4c537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:b2:75:62:44:fa:ec:fa:55:1e:85:9e:75:76:bb:35:32:
         84:5f:5e:5b:85:9f:b0:98:f7:19:1d:7a:59:46:64:bc:4c:36:
         e2:08:f6:24:4a:5b:c8:e1:79:1e:75:68:83:5e:61:d0:e6:a4:
         68:7a:06:bd:2b:1f:29:73:db:45:78:10:b4:a8:2b:52:fe:e0:
         cb:78:50:b4:02:d9:e9:58:52:d1:be:65:1a:0f:83:aa:bf:4b:
         74:57:0b:2a:44:f3:09:dc:6e:0d:80:4e:9f:01:44:c1:ca:e8:
         5b:b8:06:85:f9:5f:b7:84:b9:cc:5b:d8:83:35:49:f5:18:50:
         bd:a8:dd:a6:aa:bb:88:c6:2d:b4:36:27:84:d1:c3:ce:ba:c5:
         87:0c:bc:e2:dd:af:e9:94:d1:50:06:58:ee:2c:20:4d:41:9e:
         60:c1:86:24:82:09:d8:6e:d2:d5:ec:14:a7:fd:5f:11:29:85:
         2f:c0:8f:7e:93:40:af:8b:41:5f:66:1c:c7:70:13:75:a9:1f:
         f1:bd:74:97:bc:97:25:a2:9b:aa:80:66:ac:ad:93:98:2c:f0:
         15:ca:82:81:b3:31:5d:e6:b3:b5:e6:8c:c2:5f:f6:23:08:e4:
         2c:ed:cb:12:ce:70:60:70:49:49:da:ef:5f:cc:f8:cc:3e:2b:
         24:e6:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:00:04 2025 by rpki-client