Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/7cd15edc-9775-3e3c-8899-6fd0eb4efb99.roa
File:                     7cd15edc-9775-3e3c-8899-6fd0eb4efb99.roa (raw, json)
Hash identifier:          5K7f5BJfHFHRI7eqBAXJvloY9tnW+kG+U0DD4dSAZro=
Subject key identifier:   8F:99:34:4B:46:EE:98:F7:53:AE:AB:BB:D7:B8:74:F7:3E:68:2E:49
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328584B41E70B4BB94B39FF140D9800
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/7cd15edc-9775-3e3c-8899-6fd0eb4efb99.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398555
IP address blocks:        192.160.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0b:4b:b9:4b:39:ff:14:0d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=dbc45b98-c6c5-4240-bb97-576dcdcd5040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:32:49:4a:c9:8b:fd:86:63:da:5d:e5:34:
                    40:0e:a8:14:72:3f:e4:d3:a7:5a:a7:f7:67:ab:8c:
                    9d:fb:9d:1c:ea:e6:47:ef:c7:5a:ed:39:08:27:a4:
                    e4:c7:e1:15:76:20:f9:66:67:01:b1:91:ca:ab:df:
                    af:7b:2b:25:9c:7f:d3:fe:ec:4f:0c:01:b0:9e:6c:
                    e7:7c:7c:70:42:f4:2a:a9:41:78:c9:73:56:ee:d2:
                    20:ea:24:f0:d1:c7:ab:af:f1:ca:25:1a:69:10:e0:
                    b2:d8:9a:02:fe:33:fc:4e:fe:e9:c2:42:b2:5e:ba:
                    34:9c:61:af:6b:62:d5:c6:cb:07:2a:fa:2e:05:9e:
                    9b:9a:12:f2:75:6e:23:5a:a2:0d:5c:21:a4:f9:0b:
                    09:fc:c5:e8:d7:72:a6:7e:76:96:94:41:18:27:b7:
                    e4:ef:3b:06:63:98:8e:09:ae:5b:e7:4e:a5:04:82:
                    57:2a:49:77:21:9b:c9:e3:5b:06:32:f0:8e:c4:2a:
                    26:75:b0:b4:77:e4:c2:18:22:ad:ee:11:25:53:61:
                    19:a2:0d:8d:04:6b:57:3e:98:f8:5f:e0:ca:b3:67:
                    2e:9f:3c:35:e4:ea:b8:ba:3f:38:9b:9d:ea:6d:cc:
                    2b:f1:62:1d:f7:eb:4d:4f:94:54:b4:5c:65:3f:57:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:34:4B:46:EE:98:F7:53:AE:AB:BB:D7:B8:74:F7:3E:68:2E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/7cd15edc-9775-3e3c-8899-6fd0eb4efb99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:98:50:5d:53:f7:31:52:83:e2:a0:84:1d:ef:18:66:17:
         5c:14:4d:28:0d:b3:05:0e:60:ff:f4:19:5b:7e:cb:81:b7:be:
         c1:c8:05:1d:dd:4d:50:69:18:42:ff:b1:af:2b:cb:21:c0:ea:
         87:23:dc:ed:e5:a7:e1:c9:4e:03:d9:96:4e:0c:bd:7f:00:e7:
         97:ba:a0:20:fd:05:98:a7:96:65:4b:f6:49:49:88:fc:07:22:
         89:88:30:da:14:89:70:6f:c8:77:84:ba:b2:76:08:22:2c:6c:
         a4:0d:37:bc:10:d8:9a:b2:90:87:91:40:0b:be:a0:9a:c4:67:
         04:00:59:e7:55:28:ad:7a:7f:c2:73:c3:6e:33:76:55:8c:2e:
         ec:19:b7:01:f0:cb:12:65:f8:a2:87:d8:1c:82:76:73:dd:ed:
         59:b6:d8:73:57:88:89:5b:4e:34:41:21:34:c5:65:1f:28:b7:
         1e:bb:81:30:64:e0:3c:b4:6f:8e:ea:7d:6e:df:2d:db:6b:21:
         20:68:62:41:36:7e:71:da:60:88:6d:a6:ff:c8:5f:d2:f4:0d:
         11:61:e9:b2:b3:45:3b:b8:72:29:40:77:e2:ca:cc:6f:86:7d:
         46:c9:30:81:9e:82:5e:52:82:05:f6:30:d7:f8:0c:62:67:0d:
         97:77:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:20:27 2025 by rpki-client