Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/94db6164-13b1-3f6c-a4d4-7b1c710f8574.roa
File:                     94db6164-13b1-3f6c-a4d4-7b1c710f8574.roa (raw, json)
Hash identifier:          QgLbVJcLvGdgFuoCi55pIh01AOqK9yRrhAWs7UmMyHs=
Subject key identifier:   78:86:B2:CA:96:EE:B7:71:4C:06:65:07:A7:E4:01:D0:DD:C5:9B:A2
Certificate issuer:       /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
Certificate serial:       010D0C9F4328584B0CDC0703D9EFC1AE14647480
Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/94db6164-13b1-3f6c-a4d4-7b1c710f8574.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        135.84.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:07:03:d9:ef:c1:ae:14:64:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=1c0e22fe-f04a-4afb-96f3-1f5e9626a9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:59:2f:b0:1d:1c:0d:ad:96:6b:4a:bc:02:
                    1c:09:83:f7:bd:1b:2a:a2:0f:25:7f:01:33:9e:5b:
                    90:1a:dc:06:2b:6c:ba:fe:bc:9e:b9:2c:23:0d:90:
                    ee:09:d3:69:6a:cd:fd:93:72:2e:f7:f2:01:2e:8d:
                    80:f8:6d:dd:d6:d4:69:36:99:99:a1:82:d5:27:d0:
                    28:47:d1:d1:18:b4:ab:82:2f:0f:4e:31:84:51:4f:
                    18:71:98:e9:8f:d0:28:d2:cd:20:26:1e:a8:08:fb:
                    5a:93:bc:ea:e3:62:56:65:9d:de:4f:04:43:93:ec:
                    3c:e9:aa:cd:f8:3b:e5:24:bd:94:95:54:0a:9f:94:
                    c4:c6:04:bf:f7:f7:a1:77:9a:ac:37:27:24:36:28:
                    8b:3f:11:b3:74:22:e9:3c:8d:a0:23:0f:37:22:01:
                    cd:3a:91:f9:bf:64:c0:dc:11:d4:9b:df:ba:a5:c9:
                    1c:fc:93:50:3d:9c:71:13:4b:76:84:42:e5:5e:ad:
                    7b:d4:61:ce:d9:5a:52:d7:4b:e5:ff:35:69:8a:0e:
                    13:0a:0b:84:8d:79:b4:cd:04:b6:a8:63:df:9e:48:
                    1e:41:d4:81:92:c6:84:5e:55:a5:11:1d:38:f5:bd:
                    c8:1e:ba:2c:e1:78:a0:df:d0:f3:a1:04:7c:e4:06:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:B2:CA:96:EE:B7:71:4C:06:65:07:A7:E4:01:D0:DD:C5:9B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/94db6164-13b1-3f6c-a4d4-7b1c710f8574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl

            X509v3 Authority Key Identifier:
                keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:7c:d6:18:bd:43:85:a6:64:35:4a:86:7e:00:c9:cc:2a:
         8e:0c:c2:c9:fb:60:9a:5f:04:72:81:3a:91:fd:53:8f:c3:73:
         12:d6:98:e0:e1:ae:04:47:67:77:f9:c0:67:d1:49:31:18:b3:
         1d:72:3a:90:43:e3:68:3d:dd:04:d7:20:51:bc:7e:3e:8b:a8:
         8c:b8:fb:28:39:1f:08:17:dc:e8:93:6c:63:75:7f:43:f0:67:
         80:a8:36:bb:51:c0:ce:6e:49:a1:10:33:39:84:2b:33:f1:71:
         fc:41:a0:b2:e8:2c:54:80:ac:97:a9:4e:60:d1:a4:55:33:40:
         63:ab:5e:3a:c2:a2:9a:9e:9f:e9:b3:6a:92:80:76:2f:fd:54:
         dc:ad:3a:bb:11:6a:10:ea:82:0a:34:fa:54:e1:be:df:43:62:
         aa:6e:6d:36:19:0b:0d:b8:ce:09:e3:41:f8:89:ea:04:3e:71:
         db:64:b2:3f:95:db:9f:20:1f:52:73:1e:26:85:a6:47:2c:77:
         bb:27:77:0d:b7:a0:e2:46:33:0d:d2:10:a8:f1:58:9a:c3:7f:
         d9:de:13:e7:4e:3e:b7:0e:1e:a9:bc:0b:72:27:2b:d1:95:c5:
         27:b5:66:67:50:52:fc:3e:b4:34:a4:83:de:1c:d8:d9:3b:a3:
         6e:82:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:34 2025 by rpki-client