Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/9acbf49e-84c5-3fd6-93f5-361923329cc6.roa
File:                     9acbf49e-84c5-3fd6-93f5-361923329cc6.roa (raw, json)
Hash identifier:          upOtPkFn+02tD63jhMAdgDQAzPk4gtkavShefexMYVs=
Subject key identifier:   B2:D3:D4:3E:EA:B5:BA:DD:EE:8E:FE:B7:4F:14:E7:29:C0:9F:A5:B8
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584B3F1C667DDDBE43E834A71AA0
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/9acbf49e-84c5-3fd6-93f5-361923329cc6.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     33164
IP address blocks:        199.47.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:66:7d:dd:be:43:e8:34:a7:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=e85f4800-0f64-40d0-ba13-47319fa853c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:8a:b6:5a:fc:55:35:15:4d:da:cd:79:7c:
                    74:42:b1:b1:15:e2:7b:81:77:ae:b9:cf:69:f1:bc:
                    ac:af:b2:a1:4c:7e:a3:93:90:22:ef:33:b6:c8:3d:
                    05:7a:9c:3c:54:47:9f:fb:a7:3d:19:ec:2e:a8:77:
                    52:81:01:cc:9a:7b:06:4f:ec:fd:51:a8:f6:23:3c:
                    98:17:6c:15:85:3f:7c:f3:d5:fb:f7:7a:73:ad:e7:
                    7c:4e:41:4d:8e:bc:c3:6b:c3:fd:3a:8c:4b:8c:7d:
                    94:7b:aa:18:2a:9e:61:d1:70:92:a1:e3:e9:b6:de:
                    89:c8:e9:89:c8:7a:da:aa:ca:0a:21:0e:64:dc:4a:
                    e9:cb:48:ee:60:c6:44:d4:c3:dc:1c:0b:9d:f2:5d:
                    e6:85:73:02:0c:19:70:59:5f:bc:7d:82:6b:e1:c6:
                    a8:4d:5d:51:b7:e2:46:d8:70:1a:31:07:ea:9d:6e:
                    80:e1:df:74:07:2c:46:b6:10:11:82:7a:7d:30:a6:
                    91:53:40:c9:b9:81:d1:41:2c:8b:41:9f:8b:53:48:
                    11:1e:14:c7:5a:f8:53:07:3f:d8:cb:6d:af:5f:63:
                    d2:9d:aa:30:07:21:86:a5:12:7b:77:6b:c3:ef:70:
                    ee:94:fa:c9:07:a5:48:69:0f:91:87:b7:34:bc:0c:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:D4:3E:EA:B5:BA:DD:EE:8E:FE:B7:4F:14:E7:29:C0:9F:A5:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/9acbf49e-84c5-3fd6-93f5-361923329cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:be:f7:f0:62:db:46:d1:6c:7e:4a:94:3d:0c:c4:43:73:
         c0:c1:55:e5:dd:d6:08:8f:68:99:0a:65:da:ea:d3:fb:43:7d:
         41:97:34:35:96:8b:32:8f:fd:50:0f:4a:c3:ae:af:23:5d:2a:
         30:d7:ec:d6:72:52:a2:ab:f3:26:56:65:62:a3:4d:4c:bc:c7:
         1a:20:42:4b:ad:9a:2d:68:da:cf:fe:d6:cf:6c:63:32:c6:8c:
         36:1d:68:02:53:22:18:a9:55:2a:24:17:a4:86:c6:9e:d3:d0:
         ef:7d:1d:c3:f0:90:a4:29:ca:16:e0:92:8e:45:15:a0:40:bf:
         a2:75:fa:8f:c2:07:36:24:c4:a1:3d:f0:4b:cb:75:8a:3b:a9:
         f6:1b:f2:7e:b9:98:e8:db:1d:41:c6:c2:db:ef:d6:d9:df:f1:
         02:5b:3f:49:cc:83:8e:06:03:9b:74:77:cd:4c:90:38:e9:37:
         3c:4f:8a:6d:95:f5:dc:47:b0:37:53:b3:59:ab:44:73:a7:e8:
         65:e2:88:07:4e:6f:3f:c8:24:56:40:fc:ec:50:33:ff:ff:17:
         bc:b0:bf:05:89:97:3e:c8:61:f2:44:f6:e7:91:0b:ff:09:68:
         74:4f:c9:d4:b0:1f:7e:f3:55:ed:e2:ae:33:eb:4b:57:29:74:
         b6:a4:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:27:20 2025 by rpki-client