Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa
File:                     6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa (raw, json)
Hash identifier:          l551IvUeZq3Jt9Fe2iDAKPxYxZSk87rgChZjaNP9iG8=
Subject key identifier:   12:67:BE:00:7C:54:B1:3C:9B:B8:04:C8:68:13:06:AF:D8:1F:1A:7B
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584B08ABF0F650CDB9864C032300
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     4150
IP address blocks:        162.250.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:f0:f6:50:cd:b9:86:4c:03:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=57287861-d202-4e77-826b-0f88755cd931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:06:b8:e5:48:94:6f:30:a2:f1:28:b8:a2:
                    6e:7c:82:d3:3f:a9:52:b6:38:b7:ec:df:f0:74:74:
                    d6:86:a9:9f:e7:88:0c:62:ff:07:62:79:ec:7d:9b:
                    0e:84:15:eb:b0:6f:9b:63:37:56:60:9a:dc:12:fc:
                    16:ba:ca:53:00:96:af:3a:7a:92:10:41:f4:04:f6:
                    3d:43:57:5d:54:40:c2:61:d3:31:61:71:07:c5:15:
                    51:e3:31:49:f0:4c:00:5f:60:c8:7d:ce:6d:29:d4:
                    7f:29:eb:a2:9e:1b:89:4c:bc:08:6f:77:7c:76:3c:
                    a2:1c:79:e5:38:d3:6f:62:ff:5e:27:87:fb:c7:02:
                    42:fe:bc:2a:63:92:e4:30:31:41:bb:a6:fe:4c:9d:
                    23:1b:39:39:e9:53:21:a4:38:c2:7f:31:98:f6:53:
                    0f:5d:17:66:7c:6f:9a:1a:f9:56:aa:b4:2a:22:2a:
                    64:78:d7:86:d1:3a:b3:64:59:24:2f:f1:ea:33:b2:
                    36:a5:2d:b1:73:c5:80:04:09:d1:89:2b:65:bf:8d:
                    f5:2d:08:04:f7:af:5e:40:2b:76:e7:c8:a4:27:63:
                    57:67:f8:53:d7:48:e2:3d:f0:ed:bf:14:89:38:25:
                    1e:75:0b:53:89:aa:7f:11:a2:90:50:81:72:8c:41:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:BE:00:7C:54:B1:3C:9B:B8:04:C8:68:13:06:AF:D8:1F:1A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:54:d7:fb:c5:39:27:20:c0:dc:bd:17:2a:26:7b:47:4d:
         6f:aa:ab:84:7b:d8:61:ba:e7:7a:02:55:75:e6:37:48:e3:8a:
         4c:c2:77:2d:65:eb:37:be:bd:8b:ba:7a:76:9b:f9:5f:48:a9:
         0b:85:1c:87:89:27:bf:91:78:3f:55:74:09:f1:f5:82:03:09:
         d4:50:71:f3:ec:91:78:4d:0a:d7:fb:06:79:e2:79:09:db:80:
         cc:de:bb:7e:79:4d:2c:1f:2a:75:af:6a:20:98:68:46:01:c6:
         8f:6f:a0:20:c2:cb:b7:be:3a:34:d6:5c:d7:10:4c:ea:fc:73:
         89:06:7c:50:b5:c5:25:db:0f:7f:fc:1e:a9:1b:63:c2:71:a3:
         71:f9:83:44:11:6a:ef:94:ad:fa:29:6a:af:58:e0:5f:d1:58:
         23:d0:92:f7:1e:a5:69:32:79:39:f3:4d:63:96:e3:1d:fe:ae:
         b4:5f:36:eb:93:52:65:be:eb:26:51:e8:28:95:2f:b9:c6:c4:
         e6:50:d5:f8:31:4c:fd:84:ed:8a:26:77:51:c5:95:d5:52:77:
         88:37:bd:e9:e3:fb:76:e0:cc:48:67:db:4e:bd:a0:c7:22:cb:
         39:48:a8:62:a4:66:d4:ff:6e:dd:e0:c9:74:68:63:75:a6:96:
         bc:36:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:32:03 2025 by rpki-client