Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f639af7c-289b-31f1-978f-4985f5517515.roa
File:                     f639af7c-289b-31f1-978f-4985f5517515.roa (raw, json)
Hash identifier:          90mhmaQWWJKAW++WRq3Xzb8Exk8v/3eLM977i9zfWnQ=
Subject key identifier:   A0:AD:61:FB:2A:2B:5B:DD:F9:AE:7F:A3:E7:8A:AB:02:89:4A:B1:5C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B328C5CF0CE49B569B1743980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f639af7c-289b-31f1-978f-4985f5517515.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        142.194.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5c:f0:ce:49:b5:69:b1:74:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=878cc059-a63b-4842-8e66-858b0d103e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:00:3f:a3:22:d7:12:45:5f:79:51:b0:24:
                    2b:c2:be:ec:d3:f9:88:47:69:ad:0b:ca:7d:9e:91:
                    6d:8c:d6:e6:cb:5e:23:74:d7:6c:e8:80:44:e8:63:
                    c4:04:db:b0:9b:5f:02:88:1f:63:dd:fc:51:6d:34:
                    0e:e7:5a:3a:a1:7d:fb:98:b2:12:93:b9:73:b2:f9:
                    42:7e:1b:c9:29:ae:d8:48:e0:88:0a:be:45:a4:2e:
                    0f:8e:fd:44:9e:ad:38:b2:ab:95:df:70:8a:46:c7:
                    0b:cd:21:95:80:fc:e6:6a:0f:3a:de:97:89:c1:0f:
                    63:e5:55:7d:d0:f1:b3:27:db:24:1f:e9:15:a0:4e:
                    f7:a9:1d:36:bd:86:38:51:33:e2:3e:8f:12:fe:ed:
                    e7:a6:e4:87:90:0c:c5:32:41:1d:88:30:5a:1a:7c:
                    da:21:ae:95:ce:a8:92:7b:8c:52:94:f9:72:a7:bc:
                    20:a3:87:ba:6d:da:2c:fe:95:d0:a3:56:1f:4b:cc:
                    8c:62:b3:32:95:25:74:e8:60:48:94:5c:09:77:ae:
                    5b:15:f6:4f:bd:ad:d2:ed:b9:b0:8f:a6:a3:e1:17:
                    ac:75:ef:8d:ac:ab:0c:62:0c:cb:cf:6c:43:9c:1e:
                    a6:36:ed:4f:55:ef:f9:2d:f5:29:a8:8d:ad:f3:e2:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AD:61:FB:2A:2B:5B:DD:F9:AE:7F:A3:E7:8A:AB:02:89:4A:B1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f639af7c-289b-31f1-978f-4985f5517515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:ac:19:00:a8:c3:2c:d8:9b:51:7f:a8:ed:87:5f:b2:92:
         c5:ec:4e:99:10:6f:c7:52:22:e2:7e:04:74:05:82:b5:b8:fe:
         c1:89:0d:61:a8:a2:50:1c:42:da:d4:44:ba:5c:e2:dc:d1:d7:
         49:05:37:96:f8:57:a5:b0:4f:0f:5b:c7:e0:2d:c4:aa:62:8e:
         65:db:2c:68:a1:5a:58:0e:be:84:65:73:43:a3:40:0d:f0:ec:
         d3:2c:3f:06:15:17:73:29:a7:e5:97:88:ef:12:7f:9f:46:f2:
         45:ac:ee:de:8d:91:70:a0:b2:33:fe:d6:79:39:18:a0:5b:ca:
         25:cc:8b:4d:6b:e8:1c:ee:c9:0a:69:10:26:a5:7e:df:90:41:
         26:34:4a:63:e1:f9:58:1e:af:38:36:4d:d1:47:21:2f:88:65:
         99:32:3e:13:37:cc:13:e9:3a:36:5f:dc:d5:b2:2f:5d:29:32:
         89:f6:56:ee:c8:49:9a:d6:64:83:58:59:62:31:9c:56:72:7a:
         11:86:f2:60:d1:9c:f8:a0:3b:c1:06:e7:75:df:2e:1f:64:8e:
         82:bb:c0:b5:63:85:a3:2b:05:bc:93:10:38:61:58:a8:b9:04:
         c3:f9:5e:b1:71:5f:12:86:c7:9a:7b:84:0e:ea:a1:8b:ed:25:
         88:e9:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:27:07 2025 by rpki-client