Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa
File:                     bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa (raw, json)
Hash identifier:          e9LX2aXQBuU59Hp+Yh+KixgfQg75OVB1kJqh6i4bcME=
Subject key identifier:   48:92:66:FC:D7:00:0E:04:4C:68:CD:30:12:11:48:19:F7:3E:15:CA
Certificate issuer:       /CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184
Certificate serial:       010D0C9F4328584B1D9C237FE9BFD8106FEF1BC0
Authority key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     54957
IP address blocks:        198.162.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:23:7f:e9:bf:d8:10:6f:ef:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a8024242-16f4-4157-8d0d-e88511fc48ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:5f:02:c8:41:e1:67:7a:9f:f1:b5:bc:1d:
                    76:b5:86:ac:84:da:46:51:ba:6d:fa:0a:3d:25:eb:
                    9f:46:38:23:97:ae:56:ce:ce:67:17:fa:21:9a:4d:
                    ae:98:bf:51:a0:b6:e2:41:63:13:fe:f4:ab:32:68:
                    73:5c:8f:55:ef:a3:4b:69:d9:54:c1:dd:15:c8:48:
                    a2:f7:e3:ca:4b:4c:07:e2:e0:2d:58:66:b1:d4:92:
                    d0:5d:9a:69:d4:f2:7d:5b:89:d3:11:ed:31:8c:40:
                    94:3e:bc:19:3f:06:18:04:4e:4f:3e:f8:c0:2e:e5:
                    99:0e:74:72:ff:b3:de:c2:f6:27:fd:40:94:f8:9b:
                    8d:b0:ce:eb:2e:91:c9:8f:a7:c1:82:11:c2:1e:40:
                    ec:d3:2b:9c:8f:0a:1d:55:32:15:7d:96:ea:b5:9d:
                    27:48:2a:49:58:b9:5e:2a:f3:12:28:18:21:8b:40:
                    7f:cd:c3:99:a2:01:18:be:5f:4e:00:9a:fe:6e:3b:
                    d3:3b:11:49:34:e1:d5:96:c6:ca:00:e5:a8:8d:f1:
                    b4:7f:2c:39:61:00:e4:85:40:6e:20:8d:95:b8:b2:
                    ad:e0:80:87:45:42:bb:ac:a3:a4:31:9f:bb:85:05:
                    8f:72:a0:85:6b:8e:b6:34:e6:3a:91:c4:d1:12:c6:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:66:FC:D7:00:0E:04:4C:68:CD:30:12:11:48:19:F7:3E:15:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl

            X509v3 Authority Key Identifier:
                keyid:E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:88:3b:42:86:9e:75:84:e7:f6:ea:a9:4e:b4:ac:e1:6c:11:
         2f:bb:61:54:f2:86:40:c8:5d:c1:8c:92:79:eb:dc:d5:55:8c:
         9a:ce:1e:c7:20:0e:58:a6:28:e4:88:70:fb:3c:bd:48:92:95:
         3e:b7:78:e5:e6:37:72:40:15:8b:e9:79:04:e7:0a:22:67:25:
         dc:40:38:85:34:af:64:88:04:f2:a1:9e:7d:3b:7c:10:02:e3:
         8c:5e:1a:d7:ea:3b:ce:d5:8b:9a:2f:d3:d1:1b:35:a4:a4:91:
         c6:c0:8f:6a:12:31:ae:0d:b1:98:03:91:f6:a6:cd:2a:92:82:
         86:5d:71:aa:c1:ca:bb:bf:91:74:dc:ef:b4:62:02:d0:a8:8f:
         50:57:eb:b6:fd:c8:27:a9:1c:36:0b:56:6a:41:17:1a:81:0c:
         dc:09:9e:da:26:25:6b:f1:1a:0a:e4:8a:26:27:6f:84:27:f3:
         85:f9:66:ab:2d:66:50:93:1a:68:88:07:a0:76:d3:0f:45:c8:
         61:44:15:98:23:36:6f:ca:6c:f4:12:5f:ae:e9:34:38:d1:c7:
         51:d3:c3:1b:b9:17:b7:dc:be:57:6a:31:82:fa:54:99:cb:e9:
         39:bc:f3:51:02:ad:1a:15:b8:42:34:27:9a:91:b4:2d:cd:55:
         11:d7:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:29 2025 by rpki-client