Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa
File:                     acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa (raw, json)
Hash identifier:          IafNbnY/hbHCovaMC+CCFBW1QbO3w4fFBddjXqYeev4=
Subject key identifier:   3F:6D:76:52:4F:00:DD:F8:AC:37:E4:32:5D:FD:82:59:95:6C:39:BD
Certificate issuer:       /CN=61880b54-4989-40ab-afdf-e5bdf8c244e1
Certificate serial:       010D0C9F4328584B5B0749FBFD3DD30934A64F00
Authority key identifier: A4:41:9E:25:7A:54:E4:EF:86:62:27:7B:D7:4D:BC:73:08:A6:57:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        141.193.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:49:fb:fd:3d:d3:09:34:a6:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61880b54-4989-40ab-afdf-e5bdf8c244e1
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=2d777352-dc38-46e7-a30c-f70f8b0d44c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:2b:bc:c4:9d:ea:10:04:d9:d1:fe:49:d9:
                    c1:36:fd:ec:af:9b:d4:ba:f1:ce:ea:5b:61:19:f9:
                    7e:5f:2b:33:d5:ff:c7:3d:bf:38:77:ca:2c:30:ea:
                    92:30:dc:b5:86:1e:c8:9d:00:0e:bf:74:55:67:ca:
                    75:fc:4c:c7:ea:d5:cd:f7:f8:49:47:97:ca:9a:ee:
                    3c:69:cc:06:d8:4a:4c:3a:f4:29:c6:2c:c4:6c:5b:
                    71:36:57:3e:27:5f:60:a3:dd:e7:ba:32:91:7c:87:
                    94:72:73:c2:1f:2e:56:4d:97:66:af:b2:2a:58:a0:
                    32:fb:89:74:32:97:9d:0e:ce:c9:05:90:55:f2:7e:
                    3f:c3:78:c7:ee:70:6c:f9:84:52:c0:c7:3f:d1:0c:
                    b0:1c:b2:bd:5f:07:74:76:cf:df:23:ff:5e:9d:33:
                    83:42:a0:cd:74:0c:2d:a7:a5:e9:3c:39:b0:e6:eb:
                    ee:b1:cd:62:a9:17:d7:74:97:d0:45:c0:9f:dd:75:
                    6c:56:c5:ae:69:90:fe:5f:5b:7a:49:f1:a1:4a:e5:
                    80:09:5d:d0:db:b1:75:74:03:ad:5d:d1:ea:88:e6:
                    42:c8:11:5f:40:39:bd:50:21:1c:36:62:03:c9:8f:
                    ca:b3:b9:a9:74:67:16:6f:c6:60:e7:b1:3c:2d:96:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6D:76:52:4F:00:DD:F8:AC:37:E4:32:5D:FD:82:59:95:6C:39:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:41:9E:25:7A:54:E4:EF:86:62:27:7B:D7:4D:BC:73:08:A6:57:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:60:a1:0f:9a:0b:ff:5d:48:38:42:06:95:aa:92:86:be:6b:
         66:23:f8:0d:63:21:1a:1e:22:22:58:95:04:a4:9c:86:07:f9:
         cf:bf:da:08:c8:74:79:e0:e3:d4:e3:11:f8:a9:63:a5:72:ba:
         03:f1:4b:f5:a1:a4:a9:3c:a9:39:bd:d2:aa:40:f0:94:5e:1b:
         43:71:64:0c:19:6b:42:6d:eb:ff:b2:6c:64:bb:6e:0e:21:12:
         b7:13:c1:94:de:59:11:6a:82:68:02:a5:e0:26:d7:63:94:d6:
         7e:d6:1a:1b:77:ac:88:f8:db:8f:19:91:0b:c2:a8:1c:52:ed:
         05:ff:20:3a:7b:f4:e1:94:a7:91:33:c4:5a:e5:a5:bc:14:0f:
         c4:91:ef:53:c0:5c:4a:02:38:bf:61:c5:c2:4a:25:17:a3:7c:
         e4:0a:4b:34:12:71:70:ca:81:d1:93:9b:b1:b3:e9:fa:80:2d:
         3b:59:bb:6c:99:59:47:3d:2a:a8:f9:4e:ea:9b:e0:43:39:3c:
         4a:8a:1a:13:cf:e1:89:4b:fe:42:09:2e:b4:8c:24:9e:92:11:
         a3:d7:bc:cd:56:78:1f:5d:81:d6:10:84:1d:14:a8:6f:4c:2a:
         0c:65:16:b2:f1:20:40:d4:44:a2:79:34:13:ba:e7:a8:8d:03:
         86:13:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:39:14 2025 by rpki-client