Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/fbb718cf-9268-320a-84dd-864853dd4a4b.roa
File:                     fbb718cf-9268-320a-84dd-864853dd4a4b.roa (raw, json)
Hash identifier:          jpXQf56JHBkBilidNw8UwAASK62/xWBtrUihCTmdy28=
Subject key identifier:   E2:96:99:72:57:1D:DA:2D:88:E1:B0:CB:C6:8D:74:98:2B:F8:9A:E5
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584B434C6AA502350E2BB55BB040
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/fbb718cf-9268-320a-84dd-864853dd4a4b.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     33548
IP address blocks:        207.177.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6a:a5:02:35:0e:2b:b5:5b:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1bb85c75-0166-4b46-9b3c-d7a851752aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:1d:1a:42:fd:07:e5:3e:ef:ac:1e:7b:11:
                    3a:06:fd:83:4c:af:48:5a:1d:2b:fb:6d:33:a1:f0:
                    30:0a:27:2f:77:02:99:e3:3f:8b:c6:2d:8f:38:aa:
                    be:6c:d7:99:93:57:11:b8:3b:40:a7:c7:e5:64:98:
                    64:87:f1:c4:25:7b:f5:d0:01:92:f7:ff:9b:20:1b:
                    ba:f4:fc:81:e7:02:0d:73:3c:40:6b:20:3c:38:c6:
                    ce:4b:a0:9a:ae:a2:0d:fd:52:d3:9a:4d:1d:6d:ec:
                    b4:c6:2c:ad:35:94:28:f9:3f:67:d0:9b:2c:bc:c1:
                    15:16:4a:11:56:ea:8f:3b:af:0f:71:5c:d1:72:30:
                    66:85:9c:56:dd:0b:ee:1d:99:65:88:08:bd:e1:13:
                    b4:21:aa:c8:f4:0a:5a:aa:cc:c3:2c:a8:64:5a:4f:
                    ce:37:cb:3e:0e:50:5c:f4:ca:bb:bc:9c:97:ab:79:
                    22:60:3a:d0:e0:42:6b:81:d0:81:da:48:bd:c3:cb:
                    72:fc:f5:9f:67:18:b6:4a:ae:74:06:8a:61:00:95:
                    56:11:53:2c:f8:26:67:8d:e5:ac:a7:7f:af:55:77:
                    6b:14:86:5b:13:7a:ea:35:7a:0b:49:c0:4a:d9:3b:
                    c2:3c:67:74:21:be:08:5b:c7:61:1d:52:29:00:bc:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:99:72:57:1D:DA:2D:88:E1:B0:CB:C6:8D:74:98:2B:F8:9A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/fbb718cf-9268-320a-84dd-864853dd4a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.177.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:2b:19:1b:3b:a3:ea:41:0d:72:e7:d7:18:1d:4d:6b:c0:
         25:ed:5a:98:ff:f1:75:1c:17:e3:c5:62:a8:7f:52:49:43:83:
         21:c7:22:01:c0:0f:20:3f:12:1c:92:bf:88:d7:cb:2e:df:e5:
         92:c7:36:99:94:40:1c:75:96:06:74:e4:2e:bc:8e:08:d5:c0:
         11:52:11:fa:6b:fc:d3:89:4c:b9:fd:9a:0a:0e:9d:81:bc:eb:
         21:70:c9:2b:04:ad:e2:e4:31:ac:f8:5b:0b:66:ce:36:47:13:
         c2:6a:1a:c4:73:66:bc:8e:1b:f4:2f:00:52:24:79:b1:81:ef:
         d5:41:1c:5c:4a:07:14:7f:f4:63:78:ef:de:e8:19:0f:95:71:
         bd:36:5e:25:93:6b:6f:3d:40:19:ff:ee:68:b7:b6:df:35:ce:
         52:30:39:9d:07:7f:34:08:66:9c:1e:39:13:98:51:05:89:80:
         75:73:a1:58:51:67:e8:fa:6d:2c:95:e1:d0:50:39:bf:75:2d:
         1b:95:6a:8a:d7:e9:85:ac:5f:2a:0c:7f:0c:0e:bc:bd:76:3f:
         ab:43:7a:ab:4c:56:f8:ce:1f:87:87:1f:cb:af:ef:0e:55:fb:
         58:75:9d:2f:55:64:00:3c:2e:5d:61:da:3f:12:5c:52:b0:00:
         b2:14:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:33:43 2025 by rpki-client