Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa
File:                     c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa (raw, json)
Hash identifier:          NuKlIBoSKFpSh/bpKpIuVXuDMYfz5+TzZ6Hv5I1kGzo=
Subject key identifier:   A7:57:9E:52:3E:A1:BB:43:08:EA:71:45:21:4C:FD:AB:42:7B:5D:DE
Certificate issuer:       /CN=2b29dd5e-c879-4389-a274-f07b1d4bd842
Certificate serial:       010D0C9F4328584B153C1D8AD30204D5AA21BE10
Authority key identifier: EF:81:61:B0:51:60:0F:60:D2:A2:E6:90:7F:20:66:1D:2E:4F:A4:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     54932
IP address blocks:        198.244.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/2b29dd5e-c879-4389-a274-f07b1d4bd842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/2b29dd5e-c879-4389-a274-f07b1d4bd842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1d:8a:d3:02:04:d5:aa:21:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b29dd5e-c879-4389-a274-f07b1d4bd842
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=9b97e372-d295-40eb-ba94-05e402ec7bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:91:97:18:b9:c1:f7:f8:62:af:8b:ae:9b:
                    bb:ca:9a:37:0d:a8:ce:9b:31:61:32:11:d8:c4:87:
                    7c:f5:82:98:e2:bd:a4:04:20:af:cf:bb:63:65:4c:
                    d1:17:85:df:5d:bd:d9:09:bb:75:0d:90:3a:bb:c8:
                    3f:95:cd:17:f1:1c:06:8b:46:c9:27:4b:74:1d:86:
                    4b:c9:9c:05:cb:01:7e:54:3c:cc:55:55:2d:a2:d7:
                    cd:70:32:27:d5:90:e4:aa:14:ce:70:6d:0d:f6:1d:
                    04:b2:e7:e4:e8:67:63:16:50:88:e0:b8:35:89:44:
                    da:b1:e3:ca:9b:21:a5:a9:5a:94:db:3f:49:0d:63:
                    c3:92:2d:90:59:1e:11:76:85:b6:df:6a:3a:11:6d:
                    41:60:06:f0:66:4f:50:2b:e6:41:57:a3:1d:6f:a7:
                    08:f9:3d:8b:91:aa:04:70:bb:95:f0:31:f4:ad:3e:
                    08:e9:1b:bf:31:80:27:94:66:ce:30:31:2b:59:e4:
                    3e:82:f6:87:0f:50:0a:8a:d4:f3:a0:ef:76:8f:80:
                    14:db:b2:51:ef:e1:d8:67:c5:6f:ae:de:73:dd:de:
                    15:66:1e:3a:d2:a4:26:0e:b9:d6:7e:df:ce:a1:4a:
                    6d:a9:3a:c4:9a:bf:33:8f:94:91:7e:59:11:5b:63:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:9E:52:3E:A1:BB:43:08:EA:71:45:21:4C:FD:AB:42:7B:5D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/c10fedaa-89c7-3d6e-90b6-aaedb8a83617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842/2b29dd5e-c879-4389-a274-f07b1d4bd842.crl

            X509v3 Authority Key Identifier:
                keyid:EF:81:61:B0:51:60:0F:60:D2:A2:E6:90:7F:20:66:1D:2E:4F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2b29dd5e-c879-4389-a274-f07b1d4bd842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:61:37:6a:6e:64:ef:c9:02:d9:e9:23:d3:ae:e4:98:f1:
         cb:2f:28:e0:ee:a3:92:54:4f:3d:34:60:cd:c7:3d:f0:cb:26:
         ac:bd:90:dd:ea:5d:a3:eb:90:32:a6:21:32:10:b6:a2:d7:b2:
         70:8f:a4:14:95:d1:4d:e8:97:ac:75:69:a1:d7:c4:ca:8f:9c:
         e8:a3:9d:0f:19:bb:0e:b1:28:e9:9c:ca:d2:fc:e0:24:a6:f2:
         30:c9:59:62:a2:c8:7e:a6:03:c4:8c:82:5a:09:8b:6c:d4:5d:
         4d:1c:00:77:e3:eb:f2:97:25:43:01:7b:79:9f:35:eb:92:24:
         e1:78:15:5b:4e:66:11:26:f6:fe:6b:7f:6b:60:a8:59:2d:03:
         ff:b2:cc:81:ce:da:b7:a3:1a:d2:75:4a:bf:dd:dd:71:cc:85:
         9c:52:99:d9:c5:05:7d:7a:19:0d:9e:02:07:66:0f:eb:21:52:
         60:32:b1:4c:a8:7c:f9:da:22:48:11:41:dc:1d:10:63:4c:69:
         6f:f6:5d:90:3b:4e:82:25:da:76:c8:f7:4f:49:87:d2:14:e9:
         23:ce:ce:28:58:b4:46:79:c1:57:cd:f0:e4:c8:c4:52:04:c9:
         ca:d2:4a:9a:5c:15:8b:19:1e:7c:6f:fe:01:91:91:87:e5:d7:
         64:42:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:25 2025 by rpki-client