Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/44d751c0-297e-316e-a712-790afd6e7bfd.roa
File:                     44d751c0-297e-316e-a712-790afd6e7bfd.roa (raw, json)
Hash identifier:          6U8JwZ8/FTuqgK8vjlRz9yTkhQThjgqC16gQcGoa+UQ=
Subject key identifier:   FC:75:92:53:67:E1:FC:71:FD:B9:A5:BE:60:F9:36:C7:72:57:E9:5B
Certificate issuer:       /CN=e48d3078-1b09-45c1-aa5b-24d202c19935
Certificate serial:       010D0C9F4328584B047C09202599670FB661A300
Authority key identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/44d751c0-297e-316e-a712-790afd6e7bfd.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     35865
IP address blocks:        131.153.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:09:20:25:99:67:0f:b6:61:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48d3078-1b09-45c1-aa5b-24d202c19935
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=497e1231-00e5-4175-a1b8-ae52ded8f134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:25:eb:58:dd:51:46:32:ac:1d:7a:fc:ae:
                    32:f3:c2:33:1f:a5:4c:44:c3:7c:83:69:65:57:3d:
                    21:1e:5e:8a:08:68:e2:b7:43:b0:d7:c3:4f:ab:1a:
                    c5:63:6c:e2:58:e0:04:40:8c:e9:f2:a8:39:19:e7:
                    fe:9a:55:f6:59:50:9b:92:88:9f:67:de:0d:a9:43:
                    06:c8:c7:5d:14:3a:a7:c2:4a:8a:82:b4:1f:fb:2c:
                    83:37:c0:75:a0:f1:75:79:67:d8:a0:77:0c:2d:f6:
                    f6:e5:9d:4e:71:0e:55:80:35:f6:6a:c0:32:67:88:
                    5b:9b:bc:e8:dc:15:1f:8e:4e:d7:57:e8:a1:dd:c6:
                    f4:ab:1e:1a:c0:0d:bd:ee:01:32:78:59:2e:c0:84:
                    30:fa:50:77:58:d7:a1:e5:fb:1a:ed:8f:76:51:78:
                    e2:0d:6a:37:93:5e:e9:04:28:f4:cf:cf:ee:40:25:
                    ae:dc:64:f9:3f:e7:e1:17:0e:86:bd:8a:69:90:ca:
                    e0:e4:37:1f:94:ab:67:c7:b0:c0:50:db:bc:5b:d2:
                    2c:72:d3:9a:f9:ee:ff:32:66:b8:d9:95:5d:5f:15:
                    55:7f:8f:37:e5:55:9e:45:72:05:0a:b6:37:73:d7:
                    2e:c7:f1:46:ef:01:3c:23:a5:1c:69:e4:e8:73:f3:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:92:53:67:E1:FC:71:FD:B9:A5:BE:60:F9:36:C7:72:57:E9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/44d751c0-297e-316e-a712-790afd6e7bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.crl

            X509v3 Authority Key Identifier:
                keyid:AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:6b:dd:0d:c8:14:4d:5f:42:57:b7:a8:dd:fa:9d:79:45:
         aa:e5:06:16:1a:e9:28:60:43:2b:fd:fd:e8:a7:4f:43:e9:2a:
         80:32:ac:61:4c:e9:00:d1:4b:20:99:a9:18:8c:df:b0:b1:d7:
         76:a2:4f:fd:48:aa:19:0a:78:00:e3:31:7e:30:f4:c2:76:c9:
         01:c6:9b:f2:fe:23:2a:7b:c4:6f:70:fd:69:4e:18:57:2f:65:
         20:bf:9d:8e:db:9b:da:6c:e3:de:ae:a2:8e:b9:27:8e:99:34:
         7c:df:51:2f:03:20:4c:4a:6c:24:5c:7b:4b:cd:be:22:1e:1e:
         7f:a0:97:f2:23:52:d7:8b:0d:a1:5e:2f:97:8f:9e:d4:d7:0f:
         94:dc:c7:25:ab:81:e1:26:3f:4d:6d:be:cc:1c:07:77:a4:07:
         e6:5d:17:92:dd:e0:9c:40:2e:da:43:4d:07:62:15:b1:59:14:
         4e:ed:01:17:e9:0f:e6:43:91:ef:42:95:cd:46:ba:7d:ae:23:
         15:07:a3:cc:41:5c:a4:f6:8e:f9:78:35:4e:26:24:d4:ca:aa:
         5c:01:09:d7:25:2b:c2:90:89:04:63:c0:e8:50:9c:51:69:6b:
         e7:33:80:8d:27:b3:7b:4a:e1:3d:ca:1c:0f:29:21:86:eb:ea:
         e8:9f:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:25 2025 by rpki-client