Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/b9bb0a58-1819-3d66-a48c-aa9642c0dfa9.roa
File:                     b9bb0a58-1819-3d66-a48c-aa9642c0dfa9.roa (raw, json)
Hash identifier:          wFXnVJ0egcLapH+vBVj37iOMkHrFsieNRQGEZOAO+uE=
Subject key identifier:   B6:1D:E1:CC:2C:87:C0:2B:67:59:1B:C9:56:30:F3:59:2F:29:74:98
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584B515FF0584A210D66F8F38BE0
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/b9bb0a58-1819-3d66-a48c-aa9642c0dfa9.roa
Signing time:             Fri 26 Sep 2025 02:01:29 +0000
ROA not before:           Fri 26 Sep 2025 02:01:29 +0000
ROA not after:            Thu 25 Dec 2025 03:01:29 +0000
asID:                     21507
IP address blocks:        131.222.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:5f:f0:58:4a:21:0d:66:f8:f3:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep 26 02:01:29 2025 GMT
            Not After : Dec 25 03:01:29 2025 GMT
        Subject: CN=06c74fff-2a14-4990-935a-44792eecd96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:0e:73:77:63:71:77:87:7f:e6:92:0a:7c:
                    43:4a:98:0c:3b:0f:0d:d8:d9:df:93:35:f2:b8:cc:
                    7d:c4:7f:c5:4c:9c:a9:f3:9e:3a:21:9b:cd:b3:43:
                    38:cd:03:73:00:4c:39:8a:6b:37:75:34:19:e9:69:
                    9d:c5:76:90:e2:d7:fd:b6:13:2f:ac:7b:91:c6:34:
                    bc:64:15:61:61:c2:75:b6:53:5a:c8:1f:56:94:09:
                    0c:81:39:b0:00:01:24:79:ee:e0:fe:8c:25:4c:dc:
                    1d:04:a6:da:2b:be:a1:b8:87:79:e4:2e:93:c5:aa:
                    49:62:d3:c2:24:d4:bf:5c:7f:34:c7:bb:41:64:82:
                    72:3c:97:e9:75:65:c2:e7:20:66:83:6c:0f:f9:73:
                    26:66:c3:1e:5e:bb:85:25:2c:cb:b6:b2:fe:76:54:
                    7c:03:95:d0:ab:15:86:dd:59:cc:28:3c:f1:b8:4b:
                    fe:26:50:c0:89:dc:59:92:49:88:c5:59:c7:ba:03:
                    44:44:64:50:9e:58:91:48:8a:ab:d5:d5:c9:2e:9c:
                    d1:6f:5f:c8:39:09:bf:10:71:9d:04:b6:87:b4:86:
                    42:ad:0f:22:6c:72:d2:24:e3:05:7e:10:5f:0a:a5:
                    76:8a:c4:88:bb:51:f2:40:1d:ce:b1:cd:93:3e:43:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1D:E1:CC:2C:87:C0:2B:67:59:1B:C9:56:30:F3:59:2F:29:74:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/b9bb0a58-1819-3d66-a48c-aa9642c0dfa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:a4:b2:86:d3:b8:30:08:98:a5:51:0f:f4:54:36:9e:c3:
         7a:3b:75:1f:15:90:85:9d:4a:c6:d6:ce:67:7a:2c:9b:f4:d2:
         5d:ff:40:ff:a8:41:bf:ee:1d:67:6e:ff:f0:53:d9:57:4c:76:
         fd:6b:af:01:7c:96:3a:d1:31:b2:41:1b:bf:c4:a8:b5:59:49:
         77:29:c7:21:6c:cd:1b:49:e6:db:16:fd:a9:e2:82:69:e3:e5:
         9f:b2:b7:2c:9b:ff:b5:04:e4:6e:c5:da:20:1c:5b:8c:9d:9a:
         1b:3d:c0:f2:42:0a:a3:0f:5a:40:fa:72:c9:f8:d2:6e:e3:33:
         23:c2:21:ae:98:aa:3b:a9:e9:d1:a9:59:1a:8f:47:b8:e4:5f:
         59:88:ee:5c:50:68:96:58:33:d3:dd:b8:ed:2d:49:ad:2b:18:
         4f:8f:91:61:37:09:08:da:5b:e1:76:7b:1c:b0:6c:a2:7f:f0:
         bc:02:ee:89:21:d2:19:b9:f8:4c:60:5c:af:ce:22:f8:96:e4:
         09:88:ef:b3:fd:dc:98:8a:25:9c:f1:8b:2f:bb:17:1e:80:97:
         88:a5:71:75:3f:1b:55:a5:b9:4e:4b:d3:bf:fd:97:73:57:81:
         90:50:f1:2e:5a:d1:07:52:fb:c6:5b:9a:4f:dc:f5:16:1a:19:
         d3:6b:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:09 2025 by rpki-client