Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/7c6b0283-d6b9-3910-9bad-c12d75ee47a1.roa
File:                     7c6b0283-d6b9-3910-9bad-c12d75ee47a1.roa (raw, json)
Hash identifier:          RsNyKr0W48nQajb1BwtIYCNCxDMaxbxogsDaDENIDXI=
Subject key identifier:   F4:9A:F5:12:12:3F:A0:7F:43:51:D8:E3:70:8C:25:BC:BD:9A:D3:7F
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584B515FF06808F09EAD7613DA80
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/7c6b0283-d6b9-3910-9bad-c12d75ee47a1.roa
Signing time:             Fri 26 Sep 2025 02:01:29 +0000
ROA not before:           Fri 26 Sep 2025 02:01:29 +0000
ROA not after:            Thu 25 Dec 2025 03:01:29 +0000
asID:                     21507
IP address blocks:        135.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:5f:f0:68:08:f0:9e:ad:76:13:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep 26 02:01:29 2025 GMT
            Not After : Dec 25 03:01:29 2025 GMT
        Subject: CN=07370ab2-affd-4824-8b8e-b4a1179cda70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:8d:0c:39:41:82:02:0f:58:0d:62:22:13:
                    cd:35:97:5c:fa:c7:e5:40:ce:66:7b:82:dd:e4:ea:
                    a8:37:39:dc:d1:5e:12:62:ba:8b:27:13:49:ae:86:
                    d1:5b:14:73:19:a1:97:de:bb:7b:e5:a8:31:e1:e1:
                    34:b4:78:75:b6:5f:89:3a:88:af:18:bd:31:8c:e9:
                    1f:6e:39:3f:8d:e3:a5:36:28:f7:b6:60:3a:65:55:
                    5b:25:46:d6:2b:a4:4d:2e:84:2d:d3:c7:8c:d9:0d:
                    19:fe:3c:34:b6:8b:0e:55:85:4e:c3:b2:10:eb:a0:
                    15:a3:fb:95:a4:5f:45:92:53:3a:c2:62:95:2b:de:
                    84:ea:cf:6b:d9:de:20:82:a0:8c:cf:2e:7e:c1:0d:
                    97:f5:02:17:d6:f1:3e:34:8b:f6:79:ee:f9:43:99:
                    1c:40:d1:c4:6b:16:97:ba:fa:0c:87:0b:32:ef:c3:
                    12:d8:05:e4:e3:38:a4:9d:73:59:8c:eb:39:81:10:
                    7d:a2:40:80:d2:5d:25:e1:ed:35:8f:e0:cb:e4:5c:
                    3b:46:35:07:45:8b:1a:76:64:c8:45:cc:e8:a2:31:
                    a7:26:9d:79:51:57:bc:6d:0a:8f:75:14:8d:9c:f0:
                    38:83:8c:e3:81:ce:35:87:12:22:2b:a9:29:bb:b0:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:F5:12:12:3F:A0:7F:43:51:D8:E3:70:8C:25:BC:BD:9A:D3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/7c6b0283-d6b9-3910-9bad-c12d75ee47a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:6e:17:3a:77:6f:38:a2:b4:6b:7e:bc:28:15:83:d2:80:
         7e:bd:44:54:9d:0c:c3:08:ac:e7:b6:a9:fb:d1:7c:92:95:a2:
         88:1c:2d:e6:1e:2a:d1:16:51:b3:c3:74:9d:16:4d:95:8d:b5:
         b1:9f:f1:cf:1a:a0:49:95:5b:41:cd:29:4c:88:e1:56:7e:84:
         ce:1b:f0:6d:e2:cf:0f:ae:5d:a3:02:4d:0d:b6:c8:a1:f0:b8:
         a5:02:9e:cd:ed:64:5d:5b:33:77:60:0b:c7:56:65:c7:14:6f:
         8d:73:ba:52:95:93:4f:e6:de:4b:15:ef:1d:ac:38:9a:b6:c0:
         64:6e:3f:6e:dc:ef:00:0d:43:81:4e:7b:e8:39:09:39:5c:9c:
         bf:56:cb:83:c7:04:78:9b:4f:ff:e7:ac:82:2f:a9:94:ca:5c:
         2e:34:a3:83:36:23:7a:53:d1:52:47:33:3b:ed:36:8f:15:41:
         99:29:9f:39:c0:e9:80:f5:73:1f:54:1c:75:f4:f0:f5:b1:60:
         d4:f9:2e:12:f1:de:71:05:ee:77:82:3b:36:70:fb:26:32:3e:
         dc:32:3f:3a:be:4e:75:18:22:d6:e9:21:27:77:3e:2b:e2:e3:
         a7:22:65:3d:7b:6d:9a:e0:97:02:e3:ae:33:f3:69:17:8b:36:
         40:83:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:08 2025 by rpki-client