Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/06087853-030a-30c0-a68d-1fb362917f05.roa
File:                     06087853-030a-30c0-a68d-1fb362917f05.roa (raw, json)
Hash identifier:          VZQqTxg/EZZVEwIG1+MFqf6jS/PLS9IsA0GpbZQFE8k=
Subject key identifier:   A2:C5:20:5C:27:08:47:00:B7:F1:8A:E3:68:FE:67:44:DF:1C:24:B0
Certificate issuer:       /CN=36851ba9-e601-4ee5-b047-fce86c798909
Certificate serial:       010D0C9F4328584B7494F5A5A06071D9DF57AF00
Authority key identifier: F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/06087853-030a-30c0-a68d-1fb362917f05.roa
Signing time:             Wed 08 Oct 2025 16:41:36 +0000
ROA not before:           Wed 08 Oct 2025 16:41:36 +0000
ROA not after:            Tue 06 Jan 2026 17:41:36 +0000
asID:                     19446
IP address blocks:        131.143.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:94:f5:a5:a0:60:71:d9:df:57:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36851ba9-e601-4ee5-b047-fce86c798909
        Validity
            Not Before: Oct  8 16:41:36 2025 GMT
            Not After : Jan  6 17:41:36 2026 GMT
        Subject: CN=56288466-b3fa-48a6-8d58-888fd87850e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:b4:3c:83:6e:6f:0a:89:5d:5c:5a:3f:fd:
                    3d:d4:6a:4f:28:3e:90:33:74:1f:22:c3:5b:ec:55:
                    af:84:35:27:51:20:25:a2:44:f3:5e:33:89:c1:d2:
                    83:bd:19:b9:43:39:6a:8a:a8:3c:05:84:1a:66:5f:
                    38:6c:a4:c9:66:71:65:c7:cd:25:4d:c5:02:3e:86:
                    fb:9f:6c:6b:1d:d8:5d:d7:77:4f:ab:eb:fe:c0:e5:
                    73:c9:fe:4e:3d:1f:9c:3e:e8:40:7e:91:d9:f0:a1:
                    35:f9:7f:52:00:e7:a2:c2:25:50:c0:08:63:a3:49:
                    b0:c7:bf:41:1c:3f:1a:8a:94:e6:7d:63:ab:21:83:
                    26:3d:3e:e2:f2:e7:a0:56:c6:05:e9:31:5a:07:72:
                    fa:8e:d3:f4:4e:6a:46:fb:36:58:86:73:b7:4a:6e:
                    e6:83:3e:e3:70:8f:b2:57:02:d5:0c:be:8f:ff:72:
                    d9:91:3f:2a:39:38:1c:4b:b3:10:aa:66:6a:0f:9a:
                    b1:55:28:0e:82:3f:7f:9e:9c:f4:a8:88:58:f4:cc:
                    7f:79:dc:6d:be:31:3f:eb:03:18:a0:f9:a0:19:02:
                    da:a6:1b:0e:43:02:13:35:16:4e:be:e8:c8:63:6d:
                    b5:ed:05:2e:58:13:a7:bc:e4:bb:5d:77:84:21:1c:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:20:5C:27:08:47:00:B7:F1:8A:E3:68:FE:67:44:DF:1C:24:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/06087853-030a-30c0-a68d-1fb362917f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909/36851ba9-e601-4ee5-b047-fce86c798909.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B5:1B:BE:7A:40:03:77:E8:48:29:F1:C9:FD:00:34:9A:13:A2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/36851ba9-e601-4ee5-b047-fce86c798909.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f5:4d:bc:c2:db:e7:4e:f1:1e:cf:19:8f:5c:ce:c0:88:d1:
         51:7e:02:68:ce:25:c0:55:f2:7a:aa:d9:24:69:c7:c8:15:3b:
         3b:25:b9:5b:5d:99:3d:d3:76:28:ef:1d:dd:9b:c6:00:d7:0b:
         21:f2:b0:4f:0a:f4:e3:00:91:fc:fe:e9:53:2a:ba:be:9c:17:
         90:3a:7f:38:1b:1b:53:5a:ea:76:45:24:03:7e:ea:d2:18:3a:
         82:48:28:42:9e:77:83:62:fa:1a:b6:88:c1:a6:60:f6:71:52:
         5d:69:a7:fb:3c:6b:59:9c:e9:29:7e:8d:e7:f8:12:92:d1:15:
         f4:d3:6a:85:cf:fd:41:d3:44:32:7a:c3:c3:cc:dc:c2:67:52:
         f6:f2:5c:e8:a6:a4:d4:3d:52:18:59:ff:0f:4b:da:31:56:74:
         ac:6f:21:20:e7:1f:58:f5:fd:f6:11:da:5e:cc:04:f5:73:a8:
         f2:b8:21:30:03:c0:b4:47:03:0e:f3:48:b8:d5:68:23:d9:0a:
         a9:78:a9:73:1b:08:98:ae:cf:64:f8:00:96:62:14:20:44:35:
         8f:68:46:4a:6b:f0:49:03:dc:12:ba:93:3d:9f:d7:7a:10:25:
         2a:b8:df:4a:91:b0:2e:d4:5b:4f:45:eb:1c:31:40:b6:a5:70:
         2f:b5:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:47:27 2025 by rpki-client