Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b5900ece-d1a5-333f-9eae-c4962a192d20.roa
File:                     b5900ece-d1a5-333f-9eae-c4962a192d20.roa (raw, json)
Hash identifier:          2ED6yqAiIPzrLiGMzsmmk6Mkj77x7m5mNvjvB/JjVY8=
Subject key identifier:   35:77:68:98:EC:2C:C6:8A:EE:DB:F1:08:01:FB:CD:DE:BB:94:DA:77
Certificate issuer:       /CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
Certificate serial:       010D0C9F4328584B3D0773F9014B2A5BCB69A080
Authority key identifier: 75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b5900ece-d1a5-333f-9eae-c4962a192d20.roa
Signing time:             Thu 18 Sep 2025 19:07:02 +0000
ROA not before:           Thu 18 Sep 2025 19:07:02 +0000
ROA not after:            Wed 17 Dec 2025 20:07:02 +0000
asID:                     14618
IP address blocks:        167.150.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:07:73:f9:01:4b:2a:5b:cb:69:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
        Validity
            Not Before: Sep 18 19:07:02 2025 GMT
            Not After : Dec 17 20:07:02 2025 GMT
        Subject: CN=108425c5-ab40-440e-9e88-60d384d85cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:eb:7e:e3:db:b7:30:5a:c8:08:a9:54:9f:
                    b8:ce:e7:12:b9:39:b8:1b:8d:f2:04:7b:f2:1d:8a:
                    59:7b:a4:89:25:ed:2b:d7:d8:3f:6a:1c:85:a0:44:
                    f4:99:5b:68:53:99:0a:a3:8d:25:c1:46:86:62:05:
                    b9:b3:87:ce:82:46:b5:13:e2:a6:b1:5f:06:ce:3f:
                    82:ba:c6:e4:e0:f5:92:08:4f:d0:30:5d:a2:13:8a:
                    23:f1:88:04:f6:2b:42:1d:7f:85:75:e5:ea:c0:23:
                    84:a8:8e:e9:01:e3:a2:1e:61:b5:51:56:02:bf:7e:
                    c5:d1:23:89:3e:8a:ff:a0:31:2b:b3:59:d1:b4:7f:
                    c9:5d:8f:a4:fb:93:c7:3f:38:24:81:49:46:58:9c:
                    61:2d:bc:bc:f0:13:49:65:9b:26:1b:a1:48:d4:06:
                    73:f4:58:77:39:23:e6:15:8f:b8:90:f8:ad:26:a6:
                    f6:6a:79:2e:9a:26:d8:e8:c2:15:9f:de:dd:4a:9b:
                    6f:6b:fc:af:da:a4:e8:ce:9e:cb:78:26:8c:3d:4f:
                    3e:f6:c0:a8:a2:32:c3:7c:a0:2b:21:35:5e:aa:87:
                    e8:5c:14:a8:2d:c7:64:67:59:1e:18:cc:63:30:fa:
                    4d:7f:63:8e:f4:79:a9:f1:3b:be:8f:71:36:9f:da:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:68:98:EC:2C:C6:8A:EE:DB:F1:08:01:FB:CD:DE:BB:94:DA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b5900ece-d1a5-333f-9eae-c4962a192d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:70:a7:1a:a6:60:fb:87:2b:1c:04:64:5b:7f:57:1e:7c:
         f8:c6:cd:ed:47:2a:2f:d2:f0:01:b0:3b:ba:49:48:ce:6f:55:
         60:27:95:7b:4a:2a:dc:ae:e8:3b:62:2a:d0:7c:60:0a:07:74:
         bd:d0:30:21:1d:8b:b4:a0:1e:22:6d:ed:d2:35:de:8d:93:e4:
         79:e7:af:7e:e1:61:b7:e0:38:e5:54:ad:16:31:34:11:4b:ba:
         3b:a0:76:1d:12:9b:cd:06:9a:cd:aa:27:38:63:49:c8:ff:a5:
         26:f8:5b:e8:13:78:13:65:22:0c:78:89:a2:d8:77:e5:8d:89:
         62:78:bd:a8:b3:e6:95:1f:fe:59:7d:48:ca:eb:eb:34:bc:ec:
         ce:be:fd:b9:5f:24:d4:b4:5f:e0:9d:7d:50:b4:d0:d9:eb:3c:
         18:2a:93:e8:97:1b:28:c7:d6:ff:f9:db:f8:dc:fe:bc:17:8a:
         5a:fa:bd:19:df:37:1f:d1:a2:fa:96:ea:31:b2:60:21:db:c5:
         2a:9c:56:bb:9b:5c:69:b6:aa:ae:73:45:14:00:2d:e3:bb:75:
         4f:94:d7:07:98:ab:22:68:5f:f1:75:89:a4:07:93:94:31:f2:
         3e:c6:b2:19:ed:6a:51:39:2b:21:0b:89:e9:7a:e7:2a:09:b9:
         06:16:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:29 2025 by rpki-client