Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa
File:                     b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa (raw, json)
Hash identifier:          khPpfYdQ6IoL24scjkS73TVvr2arinbDPPCkJYwCEMs=
Subject key identifier:   25:BC:84:04:DA:63:32:34:E0:BB:72:4E:C8:64:83:0F:AB:26:64:24
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584B6ED6405F4F77AE2BFF97ED00
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa
Signing time:             Mon 06 Oct 2025 15:18:19 +0000
ROA not before:           Mon 06 Oct 2025 15:18:19 +0000
ROA not after:            Sun 04 Jan 2026 16:18:19 +0000
asID:                     16570
IP address blocks:        164.153.164.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:d6:40:5f:4f:77:ae:2b:ff:97:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Oct  6 15:18:19 2025 GMT
            Not After : Jan  4 16:18:19 2026 GMT
        Subject: CN=456bcf5b-24f7-40f1-8a66-f981a8b08d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:77:88:10:84:9a:80:ec:be:78:12:29:f6:
                    3f:bb:bd:0f:ff:5d:e1:2b:88:e5:5e:e4:d3:bc:08:
                    18:9e:87:aa:59:08:b7:09:d1:09:a0:1f:d7:7f:4a:
                    af:c6:6d:dd:68:df:8c:e7:89:da:7a:05:df:82:5a:
                    1c:15:9f:01:45:b7:e2:1c:46:65:66:c2:9b:a1:fe:
                    23:90:cf:94:29:f1:7b:11:60:bc:5b:2e:4a:5a:4e:
                    0f:e4:35:89:9f:de:f5:32:27:45:0e:97:45:99:64:
                    1a:cb:97:d8:e1:58:05:2f:26:46:ed:51:66:73:a5:
                    ee:25:f9:8e:6b:ca:4d:d6:21:85:61:bc:6c:b7:ef:
                    b4:d8:3c:35:72:db:49:7f:b1:a0:a6:91:9b:f7:97:
                    51:e3:78:9e:14:f1:32:a9:c9:4b:16:a2:6f:46:79:
                    a2:70:97:13:ce:42:92:72:9c:30:da:47:da:ab:16:
                    2f:ba:0b:06:9a:4e:ed:53:71:78:e2:58:0e:f2:e1:
                    4b:11:72:81:a0:42:0d:a7:3e:bf:d0:54:96:43:6a:
                    72:6c:b4:e8:ff:4d:2f:44:3a:05:a5:64:bc:23:b3:
                    52:5d:f7:38:bf:5e:6e:29:c0:dd:93:60:dd:f2:95:
                    c8:7e:5a:dd:ad:21:4e:ad:5e:b4:39:fc:15:d8:26:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:84:04:DA:63:32:34:E0:BB:72:4E:C8:64:83:0F:AB:26:64:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/b2de5da2-e62e-3d78-bd92-0f1b1b4206e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:66:2f:2a:71:2e:a2:25:d4:6c:a1:22:bc:17:cd:97:dd:e4:
         5e:f0:53:ac:ef:6c:ea:e4:e0:b1:9a:cc:ea:dc:b8:d4:ed:6d:
         0c:ef:88:3a:ae:9a:9f:dd:d3:4d:8c:0a:1c:e6:45:bd:17:36:
         bf:9e:68:84:3c:a0:d0:bf:cc:99:c7:27:6b:5a:26:e7:93:19:
         44:ef:83:ad:f1:dd:85:a0:e1:5b:95:97:0f:ab:c3:22:31:11:
         1b:ea:0e:4f:e0:dd:b0:50:15:85:83:91:b9:9f:3b:a1:81:b4:
         d7:4b:58:10:30:0d:89:23:d6:e0:ec:b2:69:44:98:18:a1:14:
         c1:49:4f:f2:8c:36:3c:dc:34:7a:e9:53:7c:e7:e0:8d:20:ce:
         31:7c:23:1e:79:d4:e8:9a:00:77:bf:43:2e:f9:c1:5d:ba:99:
         c9:1d:12:95:4c:ff:52:62:2d:0c:fd:63:f7:b4:3a:cd:32:45:
         97:3f:a3:fb:c5:97:f8:ad:2e:d9:ac:5c:3d:1b:f8:65:9d:a9:
         75:d1:08:b1:f2:d4:6c:1a:ed:fa:b7:c1:f8:3f:10:9e:e0:ab:
         f1:df:36:4f:55:76:9e:f6:0a:f0:5e:57:25:55:05:6e:30:cb:
         55:17:c5:e5:81:be:15:bb:84:dc:99:f3:fe:67:bb:f8:25:3f:
         16:0a:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:33 2025 by rpki-client