Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/a78dbd81-ad71-3395-828e-5f3ae3e1109f.roa
File:                     a78dbd81-ad71-3395-828e-5f3ae3e1109f.roa (raw, json)
Hash identifier:          rOFlqKLrNoVcfPnxc/o4Z2L/VdMQShvPo+OvcL/j1JI=
Subject key identifier:   A5:EE:63:7D:52:DE:94:14:CC:F4:F5:BD:84:A2:75:25:1E:51:CC:25
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584B6631F596A23AB208D5987600
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/a78dbd81-ad71-3395-828e-5f3ae3e1109f.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     396982
IP address blocks:        162.241.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f5:96:a2:3a:b2:08:d5:98:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=f1b04271-e583-48b5-9180-d7f3b5771b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:39:c5:75:d0:39:44:dc:e0:c3:fd:3b:a7:
                    17:b7:9b:e2:ac:84:bb:a0:b5:72:3f:4e:47:c2:a1:
                    32:85:d9:32:98:88:51:4f:65:2e:b1:87:1f:d0:6a:
                    a2:07:f5:90:b7:a0:39:89:8e:bd:6b:7a:ef:89:ba:
                    fd:bb:97:37:b2:f2:ab:59:09:7b:65:40:50:6c:14:
                    30:31:6a:10:61:57:f9:b9:78:f9:df:4e:48:17:8f:
                    05:8f:1c:ad:88:e1:4c:5d:9f:6d:76:ff:96:14:18:
                    b8:1b:7b:a9:3c:b6:f6:1b:8d:7e:b5:d9:3c:dc:ee:
                    56:d3:4d:b2:8f:65:51:72:b7:bd:82:60:b2:b3:23:
                    d8:09:17:f5:5a:59:0b:26:e7:dd:10:9f:08:95:8d:
                    12:86:a2:e7:0a:ec:cf:17:54:fc:b7:e7:3c:26:ed:
                    3f:4e:23:e2:86:f9:31:c0:ee:05:67:eb:88:b2:66:
                    3a:bf:af:6c:6d:7b:0e:95:39:61:8f:8f:4c:de:6f:
                    10:0c:75:e0:e0:0f:a6:cf:d9:43:d0:61:55:86:21:
                    7c:2c:97:9e:44:d8:2e:ad:92:3c:6c:0a:53:e2:e0:
                    27:fa:71:17:b6:0a:e1:33:05:1d:9c:08:4f:95:55:
                    02:09:98:7c:ad:2c:b8:ae:de:d5:95:2f:96:05:68:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:63:7D:52:DE:94:14:CC:F4:F5:BD:84:A2:75:25:1E:51:CC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/a78dbd81-ad71-3395-828e-5f3ae3e1109f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.241.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:e1:cc:a3:42:71:82:a1:7f:30:a2:c7:23:aa:52:af:34:
         fc:a3:32:c3:14:c1:fd:c1:42:31:0a:28:98:19:87:0f:f3:a2:
         df:52:5b:b8:6c:58:9e:25:ed:c1:cd:33:3c:0e:cb:f4:ec:de:
         d6:01:4e:03:28:a2:ff:ab:f6:41:15:5e:f7:3e:d8:c6:2a:09:
         eb:0b:eb:5c:32:7a:7b:bc:da:44:39:09:60:14:89:01:3d:e3:
         bb:5f:7c:2e:d0:2a:bc:7e:16:18:25:53:c5:97:54:b8:96:1f:
         51:d1:b8:90:4e:b1:75:26:f6:05:26:81:65:ea:cf:00:97:8f:
         aa:a6:79:ac:e2:d1:ce:9b:23:9f:7c:dc:d7:07:f2:34:ab:4a:
         1e:6f:ed:ef:00:1f:ef:c3:1b:83:4f:a8:37:13:e9:8e:f6:07:
         d4:d4:6a:02:5f:e4:04:7f:1a:84:33:56:ad:cb:4a:f4:d8:cc:
         b3:af:0f:d3:62:5a:0b:80:45:14:59:f8:d5:6c:41:0d:6a:8a:
         3d:be:bd:f4:f8:e2:6f:b3:11:ae:d9:db:47:79:9c:2e:ee:2b:
         3d:5e:f9:23:e3:19:43:a5:7c:36:75:53:8b:1a:42:76:26:d7:
         58:a6:29:be:30:b4:88:ab:ff:a0:41:93:66:79:53:66:7e:7a:
         db:b3:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:59 2025 by rpki-client