Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/30154fba-b243-34ed-a367-55f79af4c558.roa
File:                     30154fba-b243-34ed-a367-55f79af4c558.roa (raw, json)
Hash identifier:          DwwKfte4UCNacUsZtP7xyfO5rJsAWcrIu0kLwoFwavY=
Subject key identifier:   11:6C:29:DD:43:43:DB:67:9A:AE:B6:20:3B:88:C5:D3:58:C0:CE:5A
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584B3DBA2964194DFD920E32CE80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/30154fba-b243-34ed-a367-55f79af4c558.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     31898
IP address blocks:        162.144.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:29:64:19:4d:fd:92:0e:32:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=67aeae84-d329-4b2a-926b-07e84a2e144e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:d7:8b:d2:91:4c:03:06:fe:f2:9d:2e:81:
                    73:07:81:0b:2c:ed:78:e4:8c:d9:51:cb:75:a3:56:
                    1a:4e:66:ce:39:04:ad:68:15:8a:23:dd:6f:04:71:
                    9e:6c:0a:0d:94:45:bf:31:ed:2d:d3:1d:43:45:44:
                    de:d2:61:da:4b:7d:a4:57:7e:69:8b:e8:80:75:fc:
                    9a:d5:0c:3f:e8:00:ac:78:6b:99:ee:1d:f6:d0:53:
                    2e:fb:3a:ea:16:b5:32:e1:85:bd:73:4c:e7:56:2b:
                    de:53:b1:b2:42:e8:94:8c:b3:b9:cf:d7:60:29:41:
                    7b:3f:a8:3f:95:1d:59:f3:cd:ba:97:70:6b:cf:b0:
                    ff:6f:26:cd:3e:d2:8c:42:27:94:b1:9c:91:ba:ca:
                    80:61:6f:5a:f8:01:1f:7a:0a:2b:40:1b:fa:84:80:
                    a4:85:f5:c1:28:31:1d:d7:7a:a3:aa:08:aa:f6:b7:
                    41:29:48:3d:08:70:85:20:b1:94:af:2b:4e:02:3f:
                    fa:71:68:c2:77:c4:6c:d1:1a:d9:14:6c:d9:cc:ee:
                    79:74:a9:0e:28:ae:49:bf:c8:b0:ee:4a:bc:9a:0b:
                    b5:f6:40:b9:70:9a:7c:a4:96:06:d0:7d:cd:77:be:
                    16:06:69:88:69:3a:6e:f9:c9:59:38:81:a3:8e:4e:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:29:DD:43:43:DB:67:9A:AE:B6:20:3B:88:C5:D3:58:C0:CE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/30154fba-b243-34ed-a367-55f79af4c558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:00:73:d7:5d:80:66:38:b1:6c:c2:cd:0c:d0:bf:3f:67:
         4a:7f:fd:41:f8:5a:c3:1d:89:f5:e5:27:2f:59:a0:f0:e9:e2:
         40:24:78:bf:7d:d7:02:f6:9c:34:d4:d8:dc:31:dd:c1:eb:fd:
         b9:4b:cc:7b:50:58:06:47:ae:53:1b:76:cb:5a:ba:89:9f:15:
         57:ac:5a:41:cb:5a:6a:ff:a8:6d:eb:2c:f8:8f:74:24:c4:2e:
         ca:30:cf:f3:46:25:68:20:a6:6a:93:bc:a4:e7:af:80:1b:b4:
         8d:4c:c7:51:cf:8e:19:70:74:fa:d1:3a:32:00:b9:1c:a0:1e:
         4a:0f:ae:4d:6a:88:6c:16:5c:1a:ca:aa:48:1b:8c:68:94:43:
         84:22:42:93:75:7b:f6:ff:86:45:84:9f:0d:5d:13:a4:18:24:
         9b:4c:ad:86:09:2d:ac:17:22:a4:c0:d4:ed:eb:fc:8d:7e:51:
         40:3e:92:57:30:49:bd:c5:15:73:a2:db:df:a3:9d:3e:29:b3:
         87:6f:67:d1:8a:3c:6f:d6:c8:bb:75:bd:c1:22:d2:95:1b:e8:
         9b:29:af:58:fa:57:6a:88:4c:5e:9c:3f:98:0e:48:c5:65:ca:
         f0:13:d4:2b:a5:b8:e8:cf:3b:49:96:d4:f1:c1:9b:1e:03:c3:
         00:f4:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:22 2025 by rpki-client