Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa
File:                     9d9e278b-df10-3738-9844-4227ace0ea53.roa (raw, json)
Hash identifier:          mUAstr+82aONxTw4N7q2AK2X4l/+Brco8GpSNIwZLzo=
Subject key identifier:   44:99:84:AA:04:57:62:FE:B5:FB:94:FE:7F:97:BF:A9:D6:C7:44:A7
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F4328584B0B76A850EF39685A87E9A3C0
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        149.112.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a8:50:ef:39:68:5a:87:e9:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=cfd79b5f-e2da-438d-b87a-c4c017314b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:86:6d:30:cd:b8:1d:28:ed:1e:16:b6:ac:
                    f0:ef:8a:38:5a:ac:f7:f7:ed:0f:19:9e:41:7e:85:
                    30:7f:1b:80:bf:55:e6:90:a0:c5:2f:d2:f3:1d:de:
                    85:a4:5b:0f:ee:0e:c6:53:be:4f:15:b1:7a:af:7c:
                    71:24:7e:61:2b:05:92:af:8d:15:2a:a7:c5:c5:8c:
                    a6:f8:3b:ea:9d:67:19:a6:51:0f:7e:db:05:f6:f5:
                    9b:7d:af:5f:1a:90:e9:c8:a2:9c:42:f9:ce:d4:bd:
                    d8:1f:c3:9f:10:82:34:e5:98:de:14:98:64:d4:77:
                    73:6c:a8:14:3f:4c:6f:31:39:87:63:3a:1a:31:a7:
                    02:19:02:3f:31:67:06:ce:9b:e8:a4:a6:f4:2c:f2:
                    e8:95:bb:b0:d6:10:69:cf:06:0d:23:5f:9f:ab:d6:
                    e3:f2:e8:b1:ca:ae:86:f4:c2:f9:3f:a7:d7:16:a2:
                    aa:cf:5b:1e:63:8f:79:7a:50:91:b0:2a:30:ea:cf:
                    86:e3:7b:40:27:f0:ee:45:31:bb:54:86:6a:bc:d9:
                    73:56:ed:40:3d:97:34:2b:87:5b:d3:d3:9f:68:d5:
                    86:84:e1:65:fc:fa:0e:8f:f5:ea:55:0f:9d:21:15:
                    bf:6a:59:35:61:37:18:37:9d:43:fd:7b:03:fa:89:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:84:AA:04:57:62:FE:B5:FB:94:FE:7F:97:BF:A9:D6:C7:44:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/9d9e278b-df10-3738-9844-4227ace0ea53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:a1:dd:70:b2:0c:c8:1c:01:44:4c:61:cb:ef:91:b0:ca:
         c5:25:fb:bf:55:2a:3d:88:5a:52:ba:ed:53:01:ef:fd:d8:46:
         a9:15:cc:43:9f:57:30:66:4b:89:97:b0:d2:30:f7:a4:c1:ee:
         98:30:e8:57:45:04:a4:2a:60:47:b9:fb:98:ff:f7:d8:87:80:
         71:d3:ca:e8:db:0c:43:6c:58:94:f8:55:8d:90:35:de:f8:58:
         a4:db:d3:7f:ad:e5:cf:df:b1:39:33:6b:02:15:f4:d4:64:73:
         2c:9e:22:a2:eb:11:d4:e8:f4:a6:27:c4:37:58:f5:2c:31:4a:
         d8:cd:59:c7:2b:f6:ef:ff:7f:9c:1e:d8:8a:2b:a9:93:3c:06:
         ad:98:f1:fe:9a:ff:6e:f4:c2:96:68:f8:1f:a9:46:8a:71:d9:
         27:76:ab:4c:51:10:03:04:c7:fe:1f:a9:c7:54:7c:56:d4:43:
         42:17:56:b0:c9:27:f3:d4:bf:6b:c9:91:e8:5b:e9:45:00:5e:
         af:ff:54:8b:aa:18:be:ca:1e:22:f3:cf:db:d1:c9:a1:5a:3a:
         58:70:a9:8a:61:77:e8:00:a8:e4:ab:66:77:d4:fa:75:39:49:
         3e:f1:83:1f:c3:96:f8:6b:ea:36:ea:cc:46:4c:eb:73:af:e9:
         7b:8e:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:13:33 2025 by rpki-client