Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4405fb27-907c-3198-a8d5-494ddafb5d3c.roa
File:                     4405fb27-907c-3198-a8d5-494ddafb5d3c.roa (raw, json)
Hash identifier:          lZY74ceOP9psqAOP7wlE9+66EuWovqS6l8WJJk3tawM=
Subject key identifier:   7E:24:A6:BB:84:E3:A0:CA:14:54:07:6F:79:45:A2:63:1A:8D:B3:ED
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF8C4ED1AACFEED900ED7AD20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4405fb27-907c-3198-a8d5-494ddafb5d3c.roa
Signing time:             Mon 25 Aug 2025 08:18:01 +0000
ROA not before:           Mon 25 Aug 2025 08:18:01 +0000
ROA not after:            Sun 23 Nov 2025 09:18:01 +0000
asID:                     31898
IP address blocks:        169.155.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c4:ed:1a:ac:fe:ed:90:0e:d7:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 08:18:01 2025 GMT
            Not After : Nov 23 09:18:01 2025 GMT
        Subject: CN=e7fc6cc0-9d3a-446d-8ba3-e319d9657f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:cd:2b:1c:e7:ad:46:8a:7b:0d:c0:b3:c0:
                    a8:01:8b:05:f7:6f:69:c4:b5:84:67:8c:60:b9:d9:
                    82:55:dd:25:e1:fa:f2:18:58:68:62:c7:9b:92:fb:
                    74:2e:fc:cd:fb:ac:4c:52:54:71:c6:34:b1:28:52:
                    82:91:56:af:3d:3d:cb:06:da:9d:29:b7:35:61:55:
                    b6:30:fa:d0:7e:9d:ff:df:c4:ca:f6:d2:8a:a9:84:
                    b5:fd:cf:35:b5:8d:3c:ed:e6:6e:c5:20:16:2c:26:
                    39:1d:63:1c:9a:4b:ff:48:e1:53:e6:9d:48:fe:04:
                    23:80:02:81:ea:da:ea:0e:cf:fa:43:c5:ac:eb:04:
                    e4:8c:2d:60:8f:f8:fd:9a:31:23:3e:6c:0b:9a:e9:
                    8e:c4:b4:f0:b7:ea:1a:7a:16:fe:1f:c8:c1:31:d3:
                    29:db:7c:1b:8c:e3:07:e4:9a:a8:1d:48:f8:4b:da:
                    0f:34:4b:f7:80:2c:42:50:f9:e7:70:eb:63:bb:a1:
                    73:0e:cc:64:eb:76:76:c0:a0:6f:38:ba:90:76:0d:
                    90:96:7a:86:33:d4:8e:c7:21:7d:5e:14:6c:21:f5:
                    22:3c:c2:f1:d7:d3:d5:9f:ce:a5:0f:c3:20:01:3f:
                    51:1c:f2:45:dd:80:c1:6f:46:79:0c:bf:c0:c4:a2:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:A6:BB:84:E3:A0:CA:14:54:07:6F:79:45:A2:63:1A:8D:B3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4405fb27-907c-3198-a8d5-494ddafb5d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:62:11:ed:88:8b:02:08:0d:40:f6:87:ac:49:20:ff:5d:
         2a:c2:3d:80:eb:ea:9f:0a:75:c3:ff:13:5a:17:01:23:86:5d:
         ee:0b:9d:de:e6:52:f7:b2:5f:a9:4c:3d:2f:39:6b:13:d3:43:
         03:29:c1:d3:c3:0c:c7:68:9b:2a:c0:ce:01:69:a1:1c:eb:36:
         c2:e9:b4:cf:9e:83:a4:fa:c0:b5:b2:e6:c8:4a:f0:2f:cd:2a:
         d5:e8:ab:e6:10:b3:58:f8:44:11:3c:cb:b9:fd:e9:ef:72:3b:
         c5:5c:8f:92:37:cb:d3:bc:00:80:a2:22:7d:71:73:d0:d8:96:
         2f:e7:6b:cb:14:39:e7:21:51:fd:c0:0b:f9:ec:3c:2d:11:d8:
         3c:dc:e5:92:10:54:37:92:5c:46:4c:70:a0:91:c5:b2:05:d0:
         13:3e:c2:35:f3:7f:26:e3:5a:4b:7f:67:24:c9:05:af:c3:2c:
         ca:be:68:7b:61:78:05:f8:f8:aa:e4:bf:97:06:52:ce:f6:19:
         df:55:80:72:6b:0c:36:6b:49:79:7c:5c:40:e9:a4:0e:37:13:
         36:91:6f:a0:b6:be:64:a0:9e:e5:93:d9:22:c8:93:c9:ec:c3:
         3f:b2:f1:b3:02:e0:61:b9:9e:07:70:bb:fc:a8:8a:5c:1f:d3:
         14:3a:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:09 2025 by rpki-client