Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4f36585-2609-3203-b638-37574d68ab42.roa
File:                     f4f36585-2609-3203-b638-37574d68ab42.roa (raw, json)
Hash identifier:          LI9Kyi7PvcAbYpoDQjARh+Fuyr/5u90spMsr6o8oWKQ=
Subject key identifier:   BE:37:35:35:1D:22:AA:E1:7A:B5:17:27:A8:33:03:5E:84:04:D8:AD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C645F691C14B5BB094140
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4f36585-2609-3203-b638-37574d68ab42.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     29731
IP address blocks:        159.18.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:64:5f:69:1c:14:b5:bb:09:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2c45d2f7-2e52-484d-bb8e-0a2b864c7e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:23:d9:66:1d:30:a6:ad:3e:d4:6f:78:4c:
                    cf:92:09:5a:3e:a1:87:bb:18:5d:b2:8c:90:c3:a0:
                    47:9d:b4:19:69:b9:4d:8e:2a:73:44:65:e7:60:d1:
                    bb:ce:61:fd:9d:91:f5:9b:ee:2f:a2:8b:04:15:e6:
                    e1:cb:40:e8:c5:91:17:28:17:9c:2d:da:30:31:22:
                    71:1a:65:0e:d7:7d:25:40:56:ca:ff:d8:52:64:6f:
                    6c:09:e8:59:6a:1c:81:67:df:11:ea:55:28:62:76:
                    8a:90:66:87:62:78:09:53:43:0d:47:7b:45:88:3d:
                    da:25:7e:b4:20:91:ea:d4:a1:06:d2:dd:f1:ce:6c:
                    c9:ae:3a:29:99:73:8d:96:dc:be:63:ea:2a:3e:a2:
                    35:9b:16:cc:f0:2a:05:2a:10:24:b0:d7:89:cd:de:
                    a3:d9:51:29:ce:d5:cd:ef:4f:37:f7:4d:a2:fe:fe:
                    e6:2a:a0:d6:4c:3a:b5:45:26:92:5e:f8:ba:f5:fb:
                    84:02:3c:81:db:6d:96:41:e0:24:7f:e4:bd:88:eb:
                    ae:56:7a:a6:79:16:7d:10:f7:b6:80:d7:2d:81:99:
                    b7:59:d0:64:9a:94:ac:84:be:26:64:e8:e7:03:d2:
                    29:0d:25:be:19:81:8a:6b:b0:60:af:7c:df:d1:88:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:35:35:1D:22:AA:E1:7A:B5:17:27:A8:33:03:5E:84:04:D8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4f36585-2609-3203-b638-37574d68ab42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1a:6e:04:76:7e:1b:df:af:dd:b5:73:b6:2f:be:4a:6b:43:
         9c:21:d4:1c:be:17:91:00:c8:26:df:4e:d9:d9:74:17:26:2c:
         99:ac:8e:8d:00:15:b1:1b:88:59:12:70:66:be:17:ed:b3:0a:
         aa:8b:bc:4f:e3:42:c1:66:b7:67:ff:e9:34:8d:07:cd:a4:8b:
         ac:e4:3c:b8:00:07:f8:63:bf:21:a5:2c:99:7b:e2:4b:6d:b1:
         80:b2:63:d8:22:64:53:ad:8b:65:7f:2a:61:a9:83:9e:e7:d2:
         3a:78:72:a2:9b:f4:91:91:c0:f9:67:d0:b7:f3:74:e3:25:55:
         66:0f:56:80:61:06:d1:3d:a7:dd:f8:6d:8f:15:6c:a0:d9:d9:
         33:8d:95:5a:c0:8b:d6:93:3b:57:45:38:db:2d:7f:49:a5:57:
         4f:0d:c9:52:ba:d0:c3:19:cb:a0:66:2e:37:96:6b:a4:54:52:
         b3:ee:2d:86:07:c6:97:a5:ce:bf:9b:d2:7c:42:4e:e2:67:81:
         f0:bc:57:51:94:be:32:f7:04:fe:a6:0b:41:05:cd:c3:18:f1:
         b0:57:a7:9f:92:80:67:6e:41:e8:2e:94:77:94:72:e8:32:16:
         0f:9c:11:37:02:b0:71:ce:df:6f:39:5c:7f:17:e5:56:ea:3f:
         f1:af:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:37:02 2025 by rpki-client