Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa
File:                     0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa (raw, json)
Hash identifier:          e/8DgqkIERDejAH+E7UfIKNNsVNqsmj8dVfJXsB0/GM=
Subject key identifier:   16:96:A9:FF:7D:B6:D6:F9:C3:34:75:E7:24:46:7E:0B:4F:6B:68:2B
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B3DB704FB9FEC794026CA0040
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        141.193.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:04:fb:9f:ec:79:40:26:ca:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=7ecc488f-e85d-4ca1-b125-5727df2c7bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:19:b2:48:3c:85:81:ac:9b:dc:53:71:9e:
                    7b:18:32:68:1d:d3:5e:7f:87:44:b0:d8:1b:bc:39:
                    18:f1:96:63:e3:73:ab:41:c1:2c:0d:d0:0d:ee:fa:
                    e8:21:8f:91:ab:ff:fc:e6:db:a5:01:0c:81:d2:fb:
                    53:d2:85:8b:fa:ff:96:7c:02:c7:cc:e8:5f:9d:54:
                    6e:65:6e:e1:1e:f6:e4:fa:35:d3:d6:d1:7c:71:18:
                    6e:e3:72:aa:b1:cd:99:36:eb:b9:ab:f7:96:57:01:
                    75:e9:20:9f:44:2a:ab:1a:95:25:58:d0:a5:90:9f:
                    9b:a5:bc:43:27:2f:d6:af:9e:2e:e4:d0:e3:e5:74:
                    d4:df:bf:70:61:98:48:49:86:bb:1d:12:b4:fb:2f:
                    f0:f7:08:8f:77:9d:2d:e1:ee:38:f3:07:a0:c8:74:
                    c9:d7:e4:e9:9a:0e:8a:91:81:03:7c:d5:59:cd:02:
                    a8:50:4b:43:d0:2f:c4:2e:66:50:08:0a:e0:0c:f1:
                    53:7d:0f:a4:19:82:0a:52:71:83:25:f3:7a:52:b7:
                    f4:08:19:96:0e:65:d4:ef:fd:a4:ee:1d:e4:37:ee:
                    4f:23:ef:02:50:fa:87:49:d0:a8:29:d3:eb:60:9d:
                    12:89:10:45:89:ab:13:41:2a:84:90:16:86:d3:11:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:A9:FF:7D:B6:D6:F9:C3:34:75:E7:24:46:7E:0B:4F:6B:68:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:23:6f:73:d7:b7:3e:03:9b:c5:26:ab:5d:c9:31:42:30:
         c2:05:8a:c1:05:64:9a:a4:f2:55:29:0f:25:9a:35:00:ea:fc:
         2d:f7:1a:26:ee:ff:71:53:02:7d:1c:5e:70:7f:17:f8:b5:ba:
         93:ab:4f:31:0d:80:56:94:07:cb:be:74:e6:cf:40:9f:89:0b:
         9a:8e:3c:57:6c:3f:fd:27:e9:6e:7f:d8:96:70:c6:ae:88:d2:
         a6:0d:f6:1b:e9:7c:94:f2:b9:e6:da:83:9b:01:66:2a:f1:0d:
         68:3a:89:70:bb:47:47:ac:0d:67:5e:6b:37:54:e5:32:fd:fa:
         51:e0:ad:0e:83:a6:2e:68:ba:33:9a:d8:7a:75:a6:70:bf:20:
         ad:99:d9:f0:cd:fe:e3:bd:6a:95:05:7f:7e:85:ca:41:92:37:
         10:3a:27:9d:f1:08:7b:59:91:dd:fe:35:47:50:4c:9a:d0:7d:
         68:a8:f8:6a:1f:ae:74:de:84:52:30:40:2c:6b:e2:e3:5a:07:
         89:a7:0f:ab:e9:e1:17:b1:64:23:1c:74:29:7f:f9:39:d2:3a:
         34:44:61:1f:ee:e8:89:08:04:70:cd:20:a9:52:17:c1:ed:39:
         37:61:31:b8:d9:fa:96:e8:b4:a7:38:5f:b5:e3:70:05:32:aa:
         23:6e:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:59 2025 by rpki-client