Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa
File:                     9427c3ba-366c-3030-b0b2-82dec0245ef9.roa (raw, json)
Hash identifier:          bInnhtlOGhiR1Wm3OeZx2nmir+RtvFrJ5diZZlHLzMQ=
Subject key identifier:   7C:ED:59:12:53:9F:9E:EC:3A:41:2B:07:3A:53:62:B7:C3:CD:FD:65
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F4328584B4616FB0049A691D43EE47C00
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     393591
IP address blocks:        65.254.172.0/24 maxlen: 24
                          65.254.173.0/24 maxlen: 24
                          65.254.177.0/24 maxlen: 24
                          65.254.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fb:00:49:a6:91:d4:3e:e4:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=42838a37-b961-4eee-a810-f99287aad78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:43:20:25:d1:34:af:58:50:18:48:75:f7:
                    bc:9c:79:92:92:18:eb:97:16:50:85:0a:8d:90:a2:
                    8c:07:eb:27:6a:d2:b2:4d:1f:26:2b:9b:1e:a9:10:
                    3f:61:6c:1c:42:f6:70:fa:01:52:d1:ce:25:ec:05:
                    5e:25:62:bd:e5:3b:06:3e:36:04:35:24:a3:90:f1:
                    1e:08:24:7e:dd:70:9f:5a:ec:79:92:a7:2a:b1:5b:
                    6f:fe:49:e9:da:80:0b:84:ac:da:6d:e7:36:7a:45:
                    7a:cb:ca:6b:15:e4:a4:ff:68:21:65:40:a2:f9:75:
                    71:7f:71:b2:c4:7d:5b:ba:be:60:e2:76:f2:f8:c0:
                    f0:90:a1:49:b9:ee:5d:69:50:cd:08:b7:3d:33:32:
                    f1:27:3d:59:57:f7:93:b9:8f:8a:08:86:30:98:04:
                    b9:f3:4e:80:74:9f:c5:f2:70:c3:38:81:7b:37:1a:
                    bb:8c:c7:09:dc:f6:30:6c:01:08:91:59:52:a2:b5:
                    5f:7a:63:63:fa:77:8f:43:84:be:1c:10:b2:4a:fc:
                    35:3a:12:dd:4e:12:41:60:f9:f5:2a:ec:77:be:66:
                    73:8a:5b:4d:21:5d:02:11:8b:44:5e:30:b2:c6:3a:
                    85:ad:ae:cd:3c:89:10:14:fe:1d:66:a0:ba:59:15:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:59:12:53:9F:9E:EC:3A:41:2B:07:3A:53:62:B7:C3:CD:FD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/9427c3ba-366c-3030-b0b2-82dec0245ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.172.0/23
                  65.254.177.0-65.254.178.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:31:99:0c:18:4b:4c:c5:25:75:ba:65:c2:19:64:0f:66:
         61:0e:5d:be:a4:ba:ea:4b:f1:bc:b6:f2:0f:28:1c:52:df:23:
         97:b9:8a:55:e2:7d:a9:36:3c:d6:da:b5:cd:03:7b:9c:c9:0c:
         e2:0d:7c:17:8d:20:ac:7d:4f:83:9d:b9:b7:3b:ae:a0:ae:66:
         79:f4:6f:c2:13:33:5d:36:13:87:a5:a3:91:77:99:4a:84:50:
         04:e1:52:e9:0c:70:ee:52:22:7a:75:87:db:34:cc:26:b4:86:
         5c:67:60:eb:7e:dd:69:db:29:fc:75:0e:01:92:01:ad:5c:44:
         7c:fc:fe:4c:2d:ce:ac:e2:3f:ab:df:aa:c0:02:59:27:5c:e5:
         ad:e6:48:22:f2:3f:d7:57:d8:85:ab:34:ba:9c:eb:94:81:20:
         5e:5a:83:c9:c7:90:6d:7a:7b:f4:e5:c9:49:b4:1f:30:17:ba:
         bc:89:b2:df:8d:3c:0c:a4:17:dc:f5:fe:a4:24:ec:af:12:e3:
         81:37:00:53:14:c3:b5:0c:2c:62:2f:24:eb:0a:a4:94:56:e3:
         d7:a0:e4:bc:72:12:3d:a3:4b:19:56:d7:83:ff:e2:bc:be:7e:
         5d:b8:2c:db:cf:c9:d2:ae:24:57:88:ea:89:93:85:00:cd:d6:
         9f:3c:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:32:23 2025 by rpki-client