Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2652febd-7690-36a5-acda-850c428d0abc.roa
File:                     2652febd-7690-36a5-acda-850c428d0abc.roa (raw, json)
Hash identifier:          BzSql+LWZxEu+3jkRBvjX8ZHGqy79c7ZTIMMUmsjMAY=
Subject key identifier:   29:AB:22:2D:A9:F9:10:E7:31:84:E9:0D:90:AE:E3:71:8F:F1:74:C8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B328C5D0448F9E0216C55F6C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2652febd-7690-36a5-acda-850c428d0abc.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        159.18.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5d:04:48:f9:e0:21:6c:55:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=8570bb89-67be-4b28-bd41-e79ba3c6f328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:e7:43:1b:d5:0c:c4:49:f8:8a:38:e9:ce:
                    1d:f4:c2:a5:06:d2:4c:e6:ee:3b:54:79:b2:b3:c4:
                    f1:dd:9b:b7:03:d5:fd:d2:d4:09:09:9c:5b:c4:30:
                    8e:4e:20:68:2b:95:49:28:ff:08:af:6e:ed:73:cf:
                    5d:72:d8:8f:cf:dd:71:33:fe:71:7b:74:35:26:31:
                    03:b5:ea:2d:5a:f5:e9:63:32:3e:3a:25:1f:90:c6:
                    83:30:a6:7f:4f:0d:d2:74:14:34:01:b3:07:ca:e7:
                    88:10:71:ce:53:eb:49:7f:d4:ea:53:a3:21:23:58:
                    6b:ef:60:0e:82:dd:fd:e0:ca:59:e5:f1:b4:84:0f:
                    7e:d6:0e:2e:51:fd:97:c3:84:b7:f8:81:db:9b:0a:
                    3c:35:c5:9b:23:8f:0c:50:32:c1:d9:22:7b:5d:ea:
                    52:1d:08:5a:0a:b8:4b:7e:c5:3e:bb:70:cd:07:61:
                    35:0f:62:a7:93:03:01:81:39:51:87:59:4f:0b:a4:
                    7c:22:b8:ac:a3:eb:78:11:f8:53:07:e6:e7:1b:6b:
                    17:73:23:55:27:b1:2a:92:4d:8e:c8:b1:8a:7f:eb:
                    43:6e:36:7f:82:d3:01:68:ce:db:23:31:7b:06:c1:
                    bc:9d:41:c7:4c:c6:ac:02:fb:02:f0:0e:5d:3c:27:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:22:2D:A9:F9:10:E7:31:84:E9:0D:90:AE:E3:71:8F:F1:74:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2652febd-7690-36a5-acda-850c428d0abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:50:db:8a:0f:72:01:fe:fd:1a:d4:5e:e0:77:9b:c1:4e:e0:
         60:df:18:a7:fd:59:9e:70:17:0b:6f:71:95:f5:8b:02:58:d6:
         9a:4f:eb:4f:76:58:ac:01:2d:30:2d:a5:a0:c8:fa:26:09:4c:
         7b:c4:39:22:de:09:a8:03:68:a3:2c:91:33:e4:9b:17:1f:ee:
         31:16:9e:93:43:f6:d3:9f:9f:66:6d:f3:e5:22:b7:2d:32:26:
         53:39:2a:ec:51:68:6c:a8:ad:84:4b:0f:e1:3f:7e:f2:99:23:
         80:ec:08:0b:f9:1c:0b:d7:6a:39:ce:cd:0d:f7:8a:fe:c9:bc:
         dd:6c:1c:de:b8:b8:51:c5:07:84:09:e4:45:fe:7e:38:95:58:
         e3:d1:2c:f3:d8:5b:75:03:ec:78:df:17:ce:a4:76:fb:c0:d6:
         71:83:e7:02:ed:80:84:88:45:f8:d4:85:74:0c:a7:ff:e8:39:
         aa:66:14:ba:12:f4:db:83:65:ae:b0:25:0d:36:2f:78:ee:10:
         2e:b1:17:fd:b9:28:b0:ad:22:cd:ac:a5:f4:28:1e:8b:7d:24:
         2f:cb:8b:d4:d6:54:2d:49:a3:8e:d8:58:c5:76:d1:27:90:c1:
         42:fa:e0:90:53:60:08:97:85:b4:59:86:e5:45:37:de:07:24:
         ed:1d:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:03 2025 by rpki-client