Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/b166ad65-418b-3ceb-a934-75cd8795e693.roa
File:                     b166ad65-418b-3ceb-a934-75cd8795e693.roa (raw, json)
Hash identifier:          v+mXTS/mhkJ2UntAl7OP/HXdn9RYZi5m2nkxDxNQDbo=
Subject key identifier:   FF:71:8D:37:D8:50:A8:B5:76:D1:32:DB:0D:AC:07:74:05:A1:71:AF
Certificate issuer:       /CN=e6b50385-8dc3-40bf-b077-89afa371f955
Certificate serial:       010D0C9F4328584B477C70C9BDAA869703031780
Authority key identifier: 69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/b166ad65-418b-3ceb-a934-75cd8795e693.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     22607
IP address blocks:        192.189.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:70:c9:bd:aa:86:97:03:03:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b50385-8dc3-40bf-b077-89afa371f955
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=f90a393c-5a25-4732-a67e-0b7d5705b807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:e9:a1:12:c8:11:ed:e5:fa:75:6b:83:26:
                    96:c2:c2:95:4a:5d:9f:48:b1:b9:8c:b3:a8:69:6e:
                    f9:82:b5:3a:e3:a4:95:10:2e:77:7d:c9:03:d7:4a:
                    74:8f:d5:36:b0:6d:55:51:4a:b1:98:e9:5e:ca:44:
                    e7:37:10:65:ad:2c:ed:7e:14:52:7d:bf:fe:7f:93:
                    b2:8f:5a:cd:32:62:f1:4f:bd:0d:75:40:c1:ea:c3:
                    90:32:86:74:13:0f:59:35:cc:23:73:87:3d:5f:8c:
                    a2:b0:34:c9:34:a8:a0:9d:bc:09:c9:a4:e0:74:01:
                    86:3a:3e:0c:8e:b5:00:ed:78:02:23:18:e3:a7:9c:
                    86:f1:2e:4a:25:14:6c:84:05:20:82:90:0e:72:01:
                    d4:ea:df:2b:ed:02:5e:b4:a0:6a:0a:15:7e:08:48:
                    ed:40:7d:60:53:13:4e:f9:91:f4:89:14:e9:51:18:
                    23:e9:42:10:9c:b6:36:69:7b:ba:c5:ea:cc:d0:82:
                    16:1f:9b:d3:b4:69:c1:43:ce:55:ad:9a:1a:90:86:
                    c9:62:53:30:f7:0b:08:bc:12:d1:b2:96:89:4f:f3:
                    c0:ff:db:91:c5:fd:00:68:05:aa:23:2b:f6:d0:c7:
                    e7:94:ef:73:c1:22:1e:14:31:1b:0d:6e:b4:74:cb:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:8D:37:D8:50:A8:B5:76:D1:32:DB:0D:AC:07:74:05:A1:71:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/b166ad65-418b-3ceb-a934-75cd8795e693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.crl

            X509v3 Authority Key Identifier:
                keyid:69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:04:8f:4b:78:73:5b:0c:0f:51:21:db:64:52:64:9c:00:1e:
         4d:bd:4d:b1:f3:78:15:3d:a4:b5:08:aa:17:ad:72:ca:08:17:
         60:b1:1d:5d:c7:d1:c7:90:4f:de:12:db:51:34:e1:5b:ee:05:
         6a:7d:14:a4:16:0e:30:94:d8:ca:d4:3a:87:df:ea:7d:d5:a9:
         62:85:6b:f3:e3:99:59:cc:17:51:03:f8:ab:76:46:3f:be:1d:
         c0:b4:61:31:70:51:32:2a:d9:20:94:de:6e:cb:c9:90:13:68:
         60:88:44:32:1b:1f:4d:7e:09:08:47:5f:26:fe:cd:ff:80:dc:
         11:ef:a5:1b:0b:ad:30:63:ba:a0:1e:48:71:f1:5d:a8:6d:bf:
         0d:53:a2:88:1b:22:17:96:8d:55:a4:d8:5b:49:81:0d:8b:c1:
         b9:1c:b3:79:d6:16:28:a3:d4:0d:9d:f6:14:05:14:da:d5:98:
         42:15:3c:be:4b:c0:c4:31:e8:2d:6a:23:b2:28:65:fc:fb:de:
         b4:d9:cf:3e:1a:8a:cb:2c:ce:72:7a:44:bc:69:93:2e:bc:a2:
         0f:17:25:b7:87:74:ce:85:44:e6:c0:6a:e3:17:21:a7:cb:8c:
         29:41:e3:84:c8:c1:47:7f:41:14:bb:1b:81:58:97:09:3b:4b:
         8a:d5:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:43 2025 by rpki-client