Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c77d0f2d-690b-3c10-b435-fb6b9b0df319.roa
File:                     c77d0f2d-690b-3c10-b435-fb6b9b0df319.roa (raw, json)
Hash identifier:          DqdT3b8qcsapajAyFn0fgvDdCmfQqcCtnpHZqkQtfe8=
Subject key identifier:   40:33:EF:02:AA:9C:47:EF:81:AE:63:73:DB:E2:A1:DE:F1:73:95:DB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C627785972B692839A540
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c77d0f2d-690b-3c10-b435-fb6b9b0df319.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     17088
IP address blocks:        159.18.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:62:77:85:97:2b:69:28:39:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=ea20803a-c7e7-407d-a896-8a2a270fd7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:df:10:06:42:13:cd:dc:02:f5:81:87:e0:
                    19:a8:4f:ad:4b:ef:78:b7:42:3e:9f:9d:90:78:d0:
                    b8:20:87:c1:70:2b:6b:bf:43:b1:3c:79:57:12:c6:
                    00:b4:50:48:45:5f:ee:9f:56:94:8f:43:e6:67:c0:
                    a5:00:a6:b7:aa:10:90:47:79:d9:ef:49:6c:c8:e6:
                    21:b8:ba:8f:03:f9:ab:bc:37:ec:41:aa:df:f5:d3:
                    21:fc:d7:ae:28:6f:b3:67:95:bb:2d:83:39:ea:6c:
                    27:10:72:1b:53:21:69:a7:e8:03:74:59:56:79:42:
                    7a:32:0c:ac:a4:db:7b:93:b0:0a:e7:6d:87:ea:35:
                    37:09:ed:32:fd:16:ad:60:51:74:e6:1c:47:6a:9d:
                    bf:9c:cf:99:af:ce:20:2b:c7:c5:c2:50:f4:a8:a3:
                    7f:20:e6:c7:0e:bb:6f:38:b4:0c:38:0b:70:37:cf:
                    19:38:31:c2:e7:ef:4c:4d:1e:0c:37:a3:9d:2d:ba:
                    16:50:39:9d:a2:04:88:9a:f6:97:df:9c:0e:9f:f5:
                    19:36:55:5d:5b:db:79:d7:16:2d:37:d8:05:df:15:
                    15:29:4b:e7:ca:77:b4:b2:48:c2:ed:dc:77:10:a0:
                    f1:65:4b:cb:ba:82:40:3d:dc:4b:86:99:d5:37:c4:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:EF:02:AA:9C:47:EF:81:AE:63:73:DB:E2:A1:DE:F1:73:95:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c77d0f2d-690b-3c10-b435-fb6b9b0df319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:68:ec:ff:22:c6:eb:6d:c2:82:d2:5b:c4:62:9f:aa:b5:
         3c:ef:b8:bf:8a:9c:23:b5:92:5b:06:a5:76:75:b2:d6:a7:16:
         4b:5b:4d:b4:df:68:5a:79:8b:72:c3:96:b2:61:b0:d0:fa:c0:
         61:36:20:41:ca:92:3e:18:c9:d4:5e:0a:72:a4:32:46:34:3c:
         01:1e:55:71:77:02:ff:b2:ec:8c:e5:6e:bf:77:f3:67:58:38:
         4f:89:4b:1d:20:fc:ec:c9:f6:b6:00:d4:17:c6:97:6d:5e:9c:
         db:11:10:ff:cd:61:2a:ff:1b:96:85:9c:93:c9:0a:47:08:6c:
         87:26:ff:ec:4d:a2:4a:4f:39:ce:24:7c:9f:fd:02:5d:c0:87:
         13:d7:33:31:83:7a:42:7f:0a:44:d6:ab:96:f6:2a:67:f2:fb:
         b0:03:f7:4c:ad:5b:99:54:59:16:0d:61:ad:05:15:e4:a4:00:
         c1:d4:20:9d:32:7b:3b:63:21:27:fa:98:a7:1b:01:0c:63:b4:
         2e:7c:21:28:43:30:09:c9:71:97:f4:77:a6:06:c6:85:50:0e:
         17:66:cf:65:9e:34:58:88:25:22:7e:bf:79:e3:32:31:e9:07:
         27:7f:39:5a:ca:c2:9a:f7:d4:f7:47:05:e9:14:55:12:98:7c:
         7e:bc:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:07 2025 by rpki-client