Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/f96596d0-9151-3afe-bc51-6c5e539c6136.roa
File:                     f96596d0-9151-3afe-bc51-6c5e539c6136.roa (raw, json)
Hash identifier:          i4fwUc/3bzgsI/u3Q6daF3BZWbZ5MB6Js8vrhNTMozo=
Subject key identifier:   D4:D3:EA:53:8A:3E:EE:02:1F:AB:ED:EA:92:D9:71:05:EE:0A:77:E7
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584B64A92487C20FDDA9199A2200
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/f96596d0-9151-3afe-bc51-6c5e539c6136.roa
Signing time:             Thu 02 Oct 2025 23:49:20 +0000
ROA not before:           Thu 02 Oct 2025 23:49:20 +0000
ROA not after:            Thu 01 Jan 2026 00:49:20 +0000
asID:                     399244
IP address blocks:        161.129.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:a9:24:87:c2:0f:dd:a9:19:9a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Oct  2 23:49:20 2025 GMT
            Not After : Jan  1 00:49:20 2026 GMT
        Subject: CN=348b0112-e518-4922-be2c-9b94f9d85d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:9b:1b:21:8d:8b:cc:22:d9:1e:ec:19:ad:
                    b1:2f:d2:b2:b7:6c:74:5e:36:5b:a2:7b:45:88:44:
                    21:16:9e:2e:69:8d:d7:7d:65:d4:c4:fa:f0:76:a6:
                    4f:00:48:fc:29:44:a4:5a:29:83:22:7e:76:04:01:
                    54:eb:fe:91:68:25:40:45:60:6b:d7:1d:2f:77:fe:
                    75:b6:b2:21:eb:1b:92:13:8f:cb:60:9d:ca:e4:01:
                    9b:45:31:6f:a3:f7:e3:71:8c:e9:d1:34:f0:ee:18:
                    f2:f2:7f:13:34:0b:31:a0:2b:9d:cd:64:fe:cb:5c:
                    2f:3b:b0:74:8c:4e:94:6a:c7:c3:28:d0:4c:3a:fe:
                    8f:5a:ff:56:65:f0:7e:0c:7f:55:b6:f8:42:c6:39:
                    74:bd:de:6c:ec:a3:f2:6b:15:c7:5a:0a:85:47:e4:
                    8f:fe:9f:fd:ee:9a:79:ff:08:8d:fe:19:da:6d:9b:
                    22:31:dc:94:d1:7a:69:76:8a:f3:2d:43:b4:3d:e1:
                    f8:29:20:c1:20:34:df:f2:67:96:9f:a3:dd:e7:f5:
                    95:e7:24:d2:a0:ed:2a:7a:f2:95:30:1a:a4:88:81:
                    96:55:75:fb:c0:3d:37:6c:30:72:7a:5e:f0:e1:11:
                    5f:de:14:62:5c:87:3b:35:0f:56:44:da:44:f2:f9:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D3:EA:53:8A:3E:EE:02:1F:AB:ED:EA:92:D9:71:05:EE:0A:77:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/f96596d0-9151-3afe-bc51-6c5e539c6136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:a3:49:96:fd:d3:6a:f0:92:91:26:7f:83:3d:20:90:f6:
         09:99:26:11:e6:47:db:51:5a:69:01:6b:56:92:f7:d0:89:91:
         36:55:68:6f:15:0d:a9:e6:bd:df:10:b8:bd:38:73:3b:2b:8e:
         e3:20:49:b1:ab:7b:ef:45:b7:02:1b:c7:a0:17:89:13:b1:49:
         2c:f5:7b:6a:e2:5d:de:1d:27:a6:28:1c:3c:47:5f:e7:4e:d6:
         73:41:d3:4e:c2:9f:fb:64:fc:1c:22:e5:70:c6:d9:5b:4f:0d:
         ad:58:60:23:af:98:8c:bc:73:72:69:51:6a:a7:c4:15:cf:b9:
         3e:b3:f2:e5:2d:a0:7a:a4:69:ef:b7:22:bc:5f:fb:31:73:1f:
         28:62:f1:dd:8f:7e:d4:85:4d:1d:61:da:b2:3f:dc:8f:bb:81:
         63:74:d8:f7:4d:75:31:59:af:04:cb:3d:a5:4f:4f:60:78:17:
         d3:bd:77:f6:0a:17:16:81:08:41:ad:17:28:02:8f:32:10:10:
         82:b2:cc:e8:e6:41:a1:c3:5c:3c:8a:13:cd:e7:bc:48:c1:ff:
         f5:0e:59:50:7f:9a:1e:b3:16:cd:d7:fb:97:eb:30:e4:14:1e:
         ff:74:ba:d0:37:b6:8a:6a:97:b3:a2:ca:68:cb:3c:5d:87:aa:
         41:aa:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:32:01 2025 by rpki-client