Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
File:                     875cadce-0a07-3252-b823-2dab07525f7b.roa (raw, json)
Hash identifier:          laAMKfXe0ZTnx+dZmww7VWWqGyHecabeLMOuQLPJwg8=
Subject key identifier:   45:41:AB:54:A8:58:85:65:BA:00:C6:3A:3C:59:72:C1:75:E7:45:02
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584B25FC3BD195CB418E37485600
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3b:d1:95:cb:41:8e:37:48:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=7c64cf9d-f00b-4686-b6b7-17a863d145d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:ff:ce:a3:10:39:4a:d7:66:15:45:57:a3:
                    6f:b7:0f:79:ed:93:6b:34:a8:6a:09:ad:7d:f0:c8:
                    25:64:c1:ea:58:33:9e:ae:f8:16:b0:85:3c:31:8f:
                    b8:68:69:a8:bd:7e:94:3e:61:9d:31:de:62:c7:bd:
                    69:f2:31:e8:a5:21:52:c8:ac:52:75:a3:08:3a:a5:
                    bc:e8:82:7d:f6:cc:e0:f9:61:92:95:1d:a0:ee:da:
                    ad:af:cc:59:73:8e:cc:6b:64:6e:da:d7:c3:6d:6d:
                    60:60:cd:a5:b1:38:f2:6c:a8:9b:d6:5d:e5:00:a1:
                    f3:3d:a2:45:61:1f:39:10:4a:00:cd:41:93:77:a1:
                    38:97:ce:ce:ef:2f:f3:d4:53:d0:00:c6:4b:91:60:
                    98:31:a4:07:f4:17:37:83:4b:57:79:aa:5e:9b:72:
                    35:25:01:ff:d1:20:f8:0c:a3:d5:cb:97:3d:5e:b3:
                    25:f1:a8:6c:84:76:3a:31:a2:29:c6:1b:ef:82:70:
                    30:af:6e:f5:5a:6c:14:2f:07:47:c8:61:b6:62:e5:
                    cc:87:48:dd:0e:c2:df:85:22:fd:87:52:6c:89:b6:
                    f2:ee:15:e8:b8:51:ba:80:fc:29:5d:69:72:f9:41:
                    c5:fd:c3:57:08:a5:fb:85:f1:90:e0:20:c3:3c:aa:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:AB:54:A8:58:85:65:BA:00:C6:3A:3C:59:72:C1:75:E7:45:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:8a:da:ca:56:f8:f0:27:ec:0f:70:85:f5:3b:66:cc:dc:bc:
         56:28:84:14:b1:9a:b8:f8:6c:32:0c:3e:44:ca:cd:c5:93:42:
         84:0e:7c:1c:0a:5e:3e:15:91:60:ec:b1:cb:6f:6a:16:5a:0b:
         59:d9:3b:3e:d6:a2:6c:dc:c8:76:6c:c1:42:71:90:9d:02:9b:
         4a:4b:ca:73:5b:ac:a3:a9:f3:dd:7f:25:89:54:75:2e:f2:d9:
         12:69:97:ef:0b:7a:a3:68:d9:fd:f0:59:16:9f:7e:25:dd:b0:
         5c:c4:ef:0a:1c:5a:06:7b:01:8c:5a:87:fc:1c:a2:d9:81:18:
         c9:ea:84:c5:5d:44:b0:8b:83:fb:67:51:19:98:f1:f3:43:6f:
         97:c8:72:0e:53:9d:c0:29:71:55:f5:25:fe:bb:c3:ca:6e:ea:
         f2:47:87:ed:71:e7:e6:9c:85:c4:58:b0:77:4d:9a:f0:13:59:
         f1:c1:ed:70:61:c4:88:0b:d4:d0:21:fa:73:36:52:32:e9:3e:
         a2:94:bd:b6:0b:71:d0:9e:37:c6:98:c6:0a:97:0a:f7:66:97:
         a7:df:ce:6e:76:a7:63:83:ec:68:14:fb:92:73:a9:6f:f9:8c:
         bc:3a:97:cf:9c:a8:1d:88:09:ff:41:33:b8:b6:96:c6:d2:fb:
         df:3c:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:46 2025 by rpki-client