Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
File:                     01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa (raw, json)
Hash identifier:          zan4O6ccxErkUllkOe5b4slwXmx/0PWEXZdY3MUQ+eg=
Subject key identifier:   5B:CD:7D:4A:70:0F:AF:30:EE:7F:B9:CF:7B:D0:00:7F:CD:5D:C2:C2
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584B5DD1EE44FA9F20892C21F840
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        144.86.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ee:44:fa:9f:20:89:2c:21:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=7286baf8-a7e6-4efd-b4fb-6923ac02ab31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:f3:d1:79:02:44:01:f1:4c:dc:c2:81:81:
                    97:5c:cb:5e:a9:3f:a2:3a:de:78:f9:eb:f3:37:7e:
                    e6:6e:93:9d:04:94:9e:a6:99:66:61:8d:ee:b4:8d:
                    49:d9:5f:67:e3:8a:ff:bc:8e:2f:aa:fd:79:23:d8:
                    fe:91:fa:4e:36:bf:27:3f:57:83:b7:22:39:72:76:
                    88:88:6c:bf:f9:7b:5a:a6:ed:60:56:fe:71:13:51:
                    6e:84:92:eb:ab:7e:c2:69:ed:3f:87:0d:db:11:63:
                    e0:40:06:05:a5:8f:c6:92:b4:13:ab:20:44:68:99:
                    88:8d:11:c3:12:ad:c2:f9:2b:3c:8c:25:8c:9e:b9:
                    aa:77:13:c8:f7:f1:98:69:6d:46:46:10:3a:e7:f0:
                    77:42:42:4e:67:d8:14:07:c6:52:75:a3:19:ac:85:
                    04:ca:19:04:07:b2:5c:33:43:70:1c:73:61:58:b2:
                    16:63:b8:cd:95:f1:8f:0a:22:12:77:b2:71:42:ac:
                    29:fb:11:4d:f5:65:74:bc:dd:c1:39:bb:c2:17:17:
                    a2:a3:af:82:3c:84:1f:95:7a:a3:2c:2d:93:98:fc:
                    1e:70:27:59:fb:e2:4b:2f:e7:c1:9a:83:20:47:ab:
                    1f:22:9f:f3:75:7f:5a:50:ae:c5:e9:60:85:da:8e:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:7D:4A:70:0F:AF:30:EE:7F:B9:CF:7B:D0:00:7F:CD:5D:C2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9e:7c:32:7b:17:96:df:41:06:ce:8d:c7:b6:94:c3:9c:ba:
         cc:ba:0f:de:70:d3:b1:7e:85:cd:e3:25:c9:0c:a4:62:59:df:
         1a:b1:be:d7:90:48:f6:a9:ba:e1:82:2a:59:e4:6e:7e:79:cc:
         87:dd:4a:e8:03:53:db:07:37:d4:c6:c1:10:0b:64:0c:c0:5e:
         7f:93:42:c6:da:d7:32:bf:f1:3b:5c:27:66:80:0f:39:6b:01:
         f3:dc:86:e8:f0:a7:68:9a:56:87:94:17:d5:0c:11:54:2a:75:
         98:40:20:87:d4:f7:53:db:11:df:3a:38:d1:75:07:78:8e:51:
         28:53:ca:ca:a6:52:e0:b0:47:24:64:43:db:63:f6:ee:32:30:
         3a:df:8d:42:d0:ac:ad:05:d9:fb:7b:1e:67:ce:af:39:ac:53:
         da:d9:4a:fb:23:38:53:60:12:50:1e:a4:d6:df:b4:29:9b:b8:
         77:99:2a:e7:6c:d3:50:09:e1:80:e3:77:5d:79:bc:9a:c3:c3:
         b2:d9:85:58:75:a4:f6:de:49:ce:ff:84:7a:b1:7f:a9:75:22:
         6c:9d:d3:24:d9:19:c7:db:6d:29:5f:14:64:39:ae:67:2c:df:
         38:5b:4a:0f:c3:71:88:5e:f1:e2:4e:bd:78:b3:df:23:7e:6a:
         af:24:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:03 2025 by rpki-client