Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7dd7a0d9-6e4a-3ce7-80e5-b47012f834eb.roa
File:                     7dd7a0d9-6e4a-3ce7-80e5-b47012f834eb.roa (raw, json)
Hash identifier:          I5TQ0YGYzK22VovF/mj9nXhaqyJsbzAlaCW+SLf5u6Y=
Subject key identifier:   82:C4:E4:AC:51:4E:B5:D4:98:24:F1:46:97:BB:C8:D3:33:CA:9F:76
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C64F8CDA959BB066BC3A8
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7dd7a0d9-6e4a-3ce7-80e5-b47012f834eb.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     40934
IP address blocks:        184.94.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:64:f8:cd:a9:59:bb:06:6b:c3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=7db05b93-857a-4570-b9ac-c15599c2eb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:e3:2f:a9:1b:7b:15:fa:6d:14:af:b9:f3:
                    0c:24:13:02:5d:07:03:60:22:19:55:1d:1f:83:7b:
                    3e:29:e2:78:0f:da:b6:b2:68:57:20:ab:0e:9c:e9:
                    81:60:fd:0d:93:91:f5:00:59:cb:0b:84:33:e6:7e:
                    d1:ee:53:59:cf:01:df:e9:e6:cf:29:02:93:47:98:
                    de:1f:37:7c:10:13:0b:6c:57:f7:de:de:4b:3e:c3:
                    12:bf:f7:8c:a0:43:f0:29:b7:13:b0:5c:07:cc:f0:
                    c7:14:e3:39:7d:4e:66:40:2c:4b:a8:44:31:8a:a7:
                    0a:10:12:db:3f:fc:b4:9d:34:23:27:ec:e6:f1:22:
                    1f:b7:2f:62:12:78:f3:1b:fe:a8:5d:53:8a:0e:b8:
                    ce:87:2c:a6:f7:ea:f4:20:78:a3:10:f3:36:1a:42:
                    0b:6d:b5:73:54:0b:41:31:84:a8:3c:2d:5e:8b:fa:
                    02:14:99:96:84:99:2a:93:f6:4e:9b:cc:ca:ee:c4:
                    5d:e2:ac:28:da:81:e3:85:b5:4a:81:ee:33:2e:da:
                    c8:79:54:70:0d:81:2e:0c:18:c1:95:09:6e:7b:bc:
                    74:22:6c:aa:79:e4:0d:80:38:a4:0f:4d:eb:40:1e:
                    13:4d:74:82:8c:10:b7:aa:3d:af:cc:70:51:7d:db:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C4:E4:AC:51:4E:B5:D4:98:24:F1:46:97:BB:C8:D3:33:CA:9F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7dd7a0d9-6e4a-3ce7-80e5-b47012f834eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:0b:f3:84:af:f9:12:55:ed:16:e2:14:f8:0e:e3:93:17:
         a8:c3:dc:a6:ec:42:57:ad:4a:5e:63:c9:51:7a:3a:af:af:4a:
         2d:1a:51:dd:86:f7:8f:8f:4c:b7:f2:6a:b4:a5:cd:52:48:34:
         51:c9:0d:e4:b5:9a:d9:83:cc:40:8c:e1:b4:23:ac:8f:b7:cc:
         42:75:30:28:fc:fa:0c:49:4e:c7:bd:18:2a:2e:86:22:18:8d:
         f6:db:b5:18:50:16:cc:e8:d9:b8:4b:ed:86:a2:3c:0a:68:af:
         1f:ea:fa:44:28:24:ef:7b:e5:1a:3c:f0:5e:8a:9b:f2:06:41:
         31:66:cc:d7:dc:8d:8d:24:af:94:51:e4:f9:11:58:2b:7d:c1:
         0d:6d:03:bf:aa:22:29:0b:e1:cf:f6:fa:96:8c:17:21:4e:6a:
         7e:8f:94:af:f5:c0:2e:08:9a:ca:7b:9b:e6:01:3c:c6:33:11:
         a6:38:71:d5:dd:96:87:26:c7:76:c9:82:63:ad:3a:4a:ad:c4:
         90:7d:53:45:0a:f2:19:e3:05:97:a1:b9:25:d6:f4:6c:78:8d:
         59:ba:1c:3d:5e:14:ca:f9:87:20:30:40:63:bb:6d:3e:2f:96:
         e0:f8:c5:4c:00:08:15:68:6b:ce:d0:10:c2:1c:60:f4:44:67:
         09:8a:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:27:16 2025 by rpki-client