Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/6b2b14d7-2419-359b-ac3d-e37c830cd3c3.roa
File:                     6b2b14d7-2419-359b-ac3d-e37c830cd3c3.roa (raw, json)
Hash identifier:          Vh1T+GDbHFD7uq25wKQFxusFBmKiZZzV5z6/DpigBHw=
Subject key identifier:   8F:66:38:27:29:89:CB:4C:D7:E8:A9:D7:00:24:44:94:6E:B0:1B:5F
Certificate issuer:       /CN=57c8d964-67cd-41a7-a53f-67520998d5f4
Certificate serial:       010D0C9F4328584B3F8685D752B863C739FE2D00
Authority key identifier: 09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/6b2b14d7-2419-359b-ac3d-e37c830cd3c3.roa
Signing time:             Fri 19 Sep 2025 16:34:40 +0000
ROA not before:           Fri 19 Sep 2025 16:34:40 +0000
ROA not after:            Thu 18 Dec 2025 17:34:40 +0000
asID:                     70
IP address blocks:        130.14.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:86:85:d7:52:b8:63:c7:39:fe:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c8d964-67cd-41a7-a53f-67520998d5f4
        Validity
            Not Before: Sep 19 16:34:40 2025 GMT
            Not After : Dec 18 17:34:40 2025 GMT
        Subject: CN=bbce5c90-879c-49b9-80b6-49956cbe84f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:a6:77:27:e9:d4:ee:96:da:05:db:6a:fd:
                    e8:43:58:3d:19:d4:75:56:73:cf:f3:de:f5:83:53:
                    ae:54:78:35:32:43:7e:19:89:45:da:67:f5:44:05:
                    57:69:31:34:4b:74:d5:00:19:df:37:0a:07:2d:0f:
                    92:64:8e:81:62:a4:c1:2d:1c:0f:46:1c:a0:10:82:
                    64:f8:8f:19:ae:9b:c6:16:2f:4e:83:cb:1a:64:d2:
                    f0:81:8d:fb:c6:01:03:e0:51:4b:e0:66:ef:aa:e2:
                    5f:ed:88:88:a8:67:58:ab:34:cb:6c:c7:a7:82:e9:
                    90:49:a4:d1:7c:eb:45:20:e3:8d:a0:59:ad:8a:6f:
                    d7:3a:9c:f6:c0:7b:35:e2:2d:98:3d:53:96:1e:1e:
                    46:d6:58:f4:86:c3:94:32:08:86:99:71:be:24:74:
                    bb:fb:e5:23:c6:c0:65:4d:1c:45:9f:e1:4a:e4:90:
                    9b:a5:38:4e:a3:40:c4:b5:5c:19:8e:cd:c4:d8:27:
                    5c:2b:e5:72:93:c1:9a:5d:3e:02:ed:43:0c:e7:85:
                    e9:0d:79:da:55:f9:8c:5b:0a:2c:d0:9f:c9:be:00:
                    7c:d3:bb:d5:a3:07:34:12:9a:d3:72:ca:67:86:12:
                    da:7c:ea:a4:0b:41:4e:d0:96:d1:10:9d:20:26:f6:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:66:38:27:29:89:CB:4C:D7:E8:A9:D7:00:24:44:94:6E:B0:1B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/6b2b14d7-2419-359b-ac3d-e37c830cd3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.crl

            X509v3 Authority Key Identifier:
                keyid:09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:f5:b5:9e:bd:69:09:7b:6e:8e:ce:e4:05:15:29:76:e0:
         50:84:0c:21:e0:c2:06:92:c6:15:67:5c:8a:2c:88:84:bf:88:
         28:3a:62:99:c8:84:eb:d2:5c:dc:e1:ec:49:c5:f1:0f:fb:48:
         f2:e2:51:4a:4a:d9:26:f2:af:85:b4:8e:b2:91:9a:91:11:21:
         f7:b4:ef:53:da:71:49:98:e8:dd:47:f5:63:0b:5e:71:f0:94:
         f2:6a:8d:50:27:78:1a:2f:8d:15:52:54:84:5d:ab:46:91:38:
         4b:6d:07:8a:9c:fc:c6:4c:a0:c2:9c:73:46:0d:68:d1:b9:b2:
         70:a2:21:94:31:ce:e5:88:1e:38:79:9e:8a:ab:c6:9e:90:5f:
         6e:60:42:86:b9:03:4d:2c:12:36:e4:34:4e:20:20:76:7f:23:
         69:7c:76:cc:33:af:aa:0b:84:30:a7:c2:de:cf:7b:90:dd:3c:
         ff:e8:86:cb:ea:b7:07:89:ed:19:ce:05:e8:92:65:4c:2e:53:
         29:89:fa:c3:c5:4a:67:5b:db:98:29:af:1e:f9:83:44:8c:ce:
         bb:d6:29:9f:39:4d:6d:1c:73:85:d6:bb:1d:97:fc:56:8b:7a:
         5e:c9:15:ca:a5:55:66:72:f9:0d:21:2e:89:dc:36:8d:58:92:
         62:ef:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:20:02 2025 by rpki-client