Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
File:                     0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json)
Hash identifier:          qyShlkeGjnn3w21rxEhF4L9oSFJjjx6NEViquCkuntY=
Subject key identifier:   85:4F:6F:75:33:85:44:2E:94:94:C8:6B:2B:73:D3:8B:2F:66:75:69
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584B25FC3BC14BA65D9482D0B580
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3b:c1:4b:a6:5d:94:82:d0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=fa8265b7-d28e-4001-86b4-8f92206cc2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:75:f0:33:a7:ca:90:98:95:ee:ff:74:f1:
                    d3:55:5f:6e:09:db:4f:6f:3e:87:89:62:36:93:64:
                    8d:5a:6e:3d:40:67:37:8e:47:e6:0d:4b:06:65:ae:
                    56:64:7e:10:ef:cb:76:49:32:fe:4e:74:71:19:60:
                    4e:8e:b5:8d:15:45:49:fe:6b:1a:74:b0:40:0c:22:
                    f5:03:97:05:7f:42:b4:84:c5:9d:a3:e5:5d:b7:e7:
                    e6:96:2e:64:88:50:a8:8a:aa:d1:22:d6:69:d7:88:
                    71:44:ed:79:d5:31:4c:98:ae:82:00:39:0c:89:80:
                    c5:47:2d:3b:a4:8b:a2:1e:bf:5b:b8:86:a9:91:77:
                    4c:02:98:fd:1a:fe:0d:5a:4c:d8:82:a7:a8:08:89:
                    9b:42:91:55:76:cb:ae:68:45:f4:d8:16:79:4e:34:
                    c7:20:3a:ac:6c:33:b5:dd:77:a0:d2:c0:f9:49:ea:
                    e0:00:c0:f0:59:d1:d0:fb:71:96:44:4e:4c:00:e2:
                    1c:6f:fe:5a:ef:fe:d0:04:53:fb:ef:41:fb:4d:9a:
                    6f:49:c5:49:eb:f9:60:85:fa:7e:cc:86:06:a9:76:
                    44:1a:ba:80:70:7a:80:f1:ff:30:f2:9d:49:12:71:
                    56:de:7f:d2:7a:db:4e:d1:16:17:8b:0b:a2:2a:cd:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:6F:75:33:85:44:2E:94:94:C8:6B:2B:73:D3:8B:2F:66:75:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:97:f2:8e:8b:df:7c:9b:45:54:33:98:97:78:3e:12:6b:3a:
         cf:48:33:e1:9a:e0:8f:2f:1c:c7:28:8a:43:ae:86:cc:cb:da:
         4b:7a:90:12:11:14:9f:7b:ea:8e:4b:ff:db:04:b9:8d:d6:f0:
         37:a9:2e:69:a9:aa:29:f8:dc:43:60:f0:a5:b6:2b:65:0a:56:
         ce:60:0c:57:eb:ea:ce:cf:48:43:6b:ac:c7:e8:3d:31:86:37:
         17:2a:06:bb:af:1b:48:e3:ed:db:ae:40:f8:3d:05:05:c0:a7:
         2d:05:6c:5d:d8:57:a5:a7:8e:bd:75:85:ab:58:bd:0c:5e:55:
         12:24:47:9c:50:9c:06:eb:cd:53:84:99:f0:3f:d4:4c:f5:c1:
         d1:83:44:70:ae:6e:c0:1f:42:6d:56:6d:5b:95:06:c3:21:a6:
         f6:53:20:47:0b:ae:de:c7:e6:cf:ae:48:ff:ce:02:da:99:39:
         d9:b3:fd:5c:ba:bc:2d:59:cd:56:dd:5e:9b:52:86:94:3d:65:
         8d:1b:b8:1c:f8:0a:34:79:4a:da:89:2b:e0:eb:e9:e0:72:03:
         68:c2:ad:0f:66:37:49:90:76:db:f0:b8:e5:82:7c:c3:fc:f9:
         b7:a6:0e:17:61:8b:46:05:28:05:86:2c:56:36:f1:e0:a9:5e:
         0b:fc:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:40 2025 by rpki-client