Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa
File:                     ef494090-aba7-39db-8156-d416d68d068e.roa (raw, json)
Hash identifier:          cGvmW33KKs9SWuaoRZ1VrzGFC+67G5gcyGpELQKttog=
Subject key identifier:   6A:CC:D8:B8:1D:CB:49:EF:E6:CE:41:31:9F:F5:03:8E:DD:2D:07:6F
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584B3126F8579BF58965FEF98580
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        65.87.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f8:57:9b:f5:89:65:fe:f9:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=53269e7b-e9e0-43be-bbf6-f8c0452cc8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:fc:2a:1b:69:38:4e:ca:2b:47:47:3e:08:
                    73:1e:44:7e:e7:d2:d7:92:cd:3e:2a:ab:e8:67:3e:
                    9f:10:10:2b:64:ac:e8:77:72:1c:63:b5:55:51:da:
                    1b:cc:c3:48:ec:e7:9c:d0:d2:28:9b:68:9c:bf:85:
                    ca:2c:cd:66:cb:9a:9d:8a:e1:c4:7b:63:de:05:79:
                    e0:e0:3a:f2:8a:d9:80:60:74:0f:37:8c:ec:b9:47:
                    4a:a8:24:99:3c:65:5e:b9:5b:72:54:b0:d8:b8:e5:
                    f0:73:04:48:f2:a9:e2:fc:eb:bd:c0:5c:40:82:0f:
                    90:7f:49:10:6a:9a:6d:cd:12:9a:cf:27:0f:1f:26:
                    73:c8:f5:79:69:9f:e6:dc:d8:f6:f8:3c:fb:ca:9f:
                    1b:d7:ab:09:a2:9a:ed:33:af:fc:68:3d:3d:2a:31:
                    ea:42:30:48:94:fc:20:29:14:ed:38:db:94:d0:b6:
                    55:ee:f6:e5:72:27:a5:3c:ed:e2:34:f2:32:70:6e:
                    65:3e:69:a8:41:30:64:13:6b:d3:97:44:b3:ec:98:
                    6a:3f:d0:81:ba:2f:23:f3:01:bb:0d:32:69:9b:65:
                    20:c0:a1:ca:c2:30:bc:34:f1:ce:1a:d7:d0:e4:56:
                    ab:8f:fe:74:c7:ee:4c:5b:c2:15:d2:ba:1b:7b:2d:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:D8:B8:1D:CB:49:EF:E6:CE:41:31:9F:F5:03:8E:DD:2D:07:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:0e:61:ff:16:99:14:8a:2b:8a:1d:2c:f8:8c:66:d2:aa:
         22:32:96:96:16:59:3c:42:8f:f7:5b:bd:98:09:71:af:59:32:
         f0:ea:99:91:6d:2e:48:27:6b:1c:24:47:4e:5b:ee:e5:ca:77:
         ac:f5:1e:e2:a8:fa:ef:23:14:ab:13:12:74:8d:36:ed:85:f2:
         5b:a0:20:95:ff:44:5e:ae:d5:96:cd:47:27:0d:3b:12:74:93:
         0b:cb:69:aa:90:ef:64:96:99:6a:2a:83:f5:78:1a:00:4b:d8:
         55:78:b4:ff:6d:93:f2:a2:d5:18:4b:64:66:b3:a3:dd:f4:97:
         cf:1f:43:90:9b:62:48:2f:fd:8c:2d:f1:ed:45:80:be:1b:49:
         b5:6d:ee:63:c1:46:4f:3b:22:41:de:86:6a:47:70:0f:f7:48:
         29:04:93:d7:dc:85:0f:0c:10:a0:96:d3:61:95:a4:09:e5:d9:
         08:f5:d0:3e:7e:90:8f:3e:6e:34:5d:a8:6e:01:b8:da:a8:64:
         40:8f:16:8b:f6:d0:b6:de:45:4b:04:0b:da:ad:d4:94:c7:8c:
         74:12:14:19:83:72:38:75:41:c1:b0:fa:96:31:79:48:0f:20:
         73:3c:0e:da:e3:1c:61:fe:c1:59:29:ce:b3:f8:cf:02:23:a4:
         e9:f9:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:14:35 2025 by rpki-client