Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa
File:                     ece36813-2691-3fd6-8afd-09858d213bb2.roa (raw, json)
Hash identifier:          5gBre+w0gCx/GKh9pxCVmXhMxbQIkSORcFHqW7NoMII=
Subject key identifier:   F1:D5:10:A1:6F:22:68:96:98:C3:A5:F0:CD:4A:C5:36:41:31:65:46
Certificate issuer:       /CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
Certificate serial:       010D0C9F4328584B758C95B2D01C0EBD136B5340
Authority key identifier: D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     400980
IP address blocks:        130.51.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:95:b2:d0:1c:0e:bd:13:6b:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=9c4e27b6-4a04-4cc6-9d4e-a9f80ef0d46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:6d:ab:15:b0:66:5f:c4:bf:b5:4c:45:ab:
                    1d:7e:21:6c:16:37:e0:5d:32:78:f4:8b:02:9b:ae:
                    95:f6:09:88:4f:a4:81:3c:79:87:ae:02:d8:96:5a:
                    b9:cb:4b:64:e4:5e:77:1a:31:0e:d0:75:d0:8d:ee:
                    ce:51:32:48:59:c7:66:42:64:cc:c2:9a:e5:b1:66:
                    0b:27:79:c5:d1:fc:23:ce:b3:da:07:24:cb:a1:b5:
                    81:49:93:3f:e0:76:24:8a:3c:6a:ed:83:81:dc:57:
                    12:7c:d2:61:04:56:6d:b8:c0:fc:28:20:04:66:a0:
                    82:cd:69:75:d1:d7:64:be:33:1d:e3:61:a9:56:9e:
                    7b:23:0a:f1:cd:67:e9:8f:8f:5f:76:b5:20:c1:ea:
                    a0:8e:e0:6c:93:53:af:e8:4e:51:00:23:ff:82:0a:
                    87:9b:5d:a2:3a:93:f5:d4:8e:aa:29:d1:9d:39:74:
                    a5:65:8f:df:5f:40:3a:a5:dc:3d:d8:40:f4:09:44:
                    d3:fc:89:87:94:69:81:93:4e:b3:1e:b0:27:33:aa:
                    2d:f4:8c:63:d4:10:5e:38:70:c2:d8:63:7c:2e:4f:
                    ef:d1:55:81:aa:bc:f6:d0:5c:f5:8a:67:28:fc:ab:
                    36:e1:54:55:cb:0a:db:94:ef:b0:e5:f7:0b:d7:7a:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D5:10:A1:6F:22:68:96:98:C3:A5:F0:CD:4A:C5:36:41:31:65:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl

            X509v3 Authority Key Identifier:
                keyid:D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:82:30:e5:3c:cb:62:e4:43:8e:27:6f:0d:b3:bd:4e:76:
         4f:60:4a:bd:35:ad:d0:8b:47:f6:b3:10:a4:8a:99:0f:36:38:
         50:2a:06:bf:7d:89:ab:0b:01:f5:20:15:ae:4e:57:f2:cf:d1:
         13:d6:57:d7:2b:c8:70:7f:6f:23:e6:8f:d2:f7:ef:4a:ab:2e:
         5b:1b:e9:37:82:1d:83:22:7a:fd:ad:c9:63:d3:8b:0e:b3:df:
         d0:61:06:a4:a8:18:f4:db:b1:4e:2b:d1:1f:61:9b:c1:e4:50:
         5a:7a:f9:89:ff:90:0e:b5:78:ba:57:2f:71:d4:3f:73:02:6d:
         94:f8:35:d0:7b:43:b1:ac:0d:9f:65:29:d1:ef:9a:91:a8:0c:
         23:52:68:4c:46:9e:9d:32:d7:06:11:1c:2b:1a:41:f8:cf:1a:
         dc:f4:d3:7a:aa:ef:2a:38:84:ca:e2:0b:4e:a5:84:9e:c0:8e:
         9c:ec:ae:cd:5b:76:d7:a2:9d:a4:36:28:91:6c:d4:bd:2b:d8:
         ae:c6:98:1f:33:a8:01:ef:81:58:f7:78:30:86:66:31:8a:da:
         6d:1c:41:91:bb:4b:e6:e3:c6:15:4e:dc:93:a0:ea:24:fc:fe:
         50:c5:e0:2a:17:e9:32:58:b5:e0:a2:4e:7b:d7:5f:2f:9c:da:
         a2:c8:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:28 2025 by rpki-client