Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/50ec7d34-0351-3d24-938b-a18756df466e.roa
File:                     50ec7d34-0351-3d24-938b-a18756df466e.roa (raw, json)
Hash identifier:          m9bpSEG/p/PFbzroHU5c290aDk6T6rn0Pirq+bgOJ98=
Subject key identifier:   68:AD:15:47:4D:BB:02:D4:CB:6C:E8:FB:02:AE:A1:FE:5B:3F:D1:32
Certificate issuer:       /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3
Certificate serial:       010D0C9F4328584B4E8F00005FCCF8737A61AA00
Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/50ec7d34-0351-3d24-938b-a18756df466e.roa
Signing time:             Thu 25 Sep 2025 01:48:53 +0000
ROA not before:           Thu 25 Sep 2025 01:48:53 +0000
ROA not after:            Wed 24 Dec 2025 02:48:53 +0000
asID:                     3450
IP address blocks:        160.36.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:8f:00:00:5f:cc:f8:73:7a:61:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3
        Validity
            Not Before: Sep 25 01:48:53 2025 GMT
            Not After : Dec 24 02:48:53 2025 GMT
        Subject: CN=0ca7f08a-35ed-4857-832c-e77e90324ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:59:05:47:0c:47:7a:e2:c4:23:f4:c1:d5:
                    cf:82:b1:30:10:43:42:5f:88:f9:8a:62:62:53:06:
                    dc:2f:8c:44:20:f4:6e:41:a6:18:be:c5:df:ba:fd:
                    ef:e8:a0:16:59:98:29:36:e5:1f:ab:25:c2:fb:db:
                    43:eb:ed:04:38:80:cd:5a:34:cf:cf:2c:ae:36:e1:
                    9c:e3:a5:62:f6:c3:d3:57:22:0b:ee:22:6b:56:b7:
                    a7:f3:45:28:ce:76:ad:7a:63:54:f9:df:d4:92:ca:
                    ee:69:cd:36:8a:f2:cd:42:de:93:b9:6b:78:c2:74:
                    a0:45:5f:00:54:de:be:6a:f0:27:aa:64:55:d7:f1:
                    7e:3d:a9:38:ef:08:ac:20:58:f7:aa:0d:32:7d:9e:
                    72:ca:d9:ea:4a:d2:fa:9e:6d:c8:bc:56:6e:ae:5f:
                    12:00:6a:c8:9e:33:2f:9a:6e:3a:ee:f5:76:62:57:
                    fe:d8:30:01:a4:81:fd:eb:8e:d4:76:71:fd:81:5a:
                    c7:c4:3e:d1:8b:5a:58:6e:99:e6:7a:ab:29:0d:3b:
                    62:d2:83:79:52:5b:46:f1:b5:c7:46:ad:fc:1f:12:
                    9c:6a:ff:31:0e:b6:53:ed:17:d9:79:b9:08:d6:fb:
                    fe:51:8b:1f:9f:d9:06:98:6d:99:c7:c7:7f:6a:9e:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AD:15:47:4D:BB:02:D4:CB:6C:E8:FB:02:AE:A1:FE:5B:3F:D1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/50ec7d34-0351-3d24-938b-a18756df466e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl

            X509v3 Authority Key Identifier:
                keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.36.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:78:8a:03:12:1a:00:b7:d6:f3:bf:fc:50:b4:e0:0f:81:
         a4:96:86:7e:2e:f8:f9:93:15:6c:1f:37:d9:cd:77:cb:09:3f:
         86:04:37:7a:18:c8:2a:14:cc:c8:a1:3d:e5:df:64:45:82:42:
         67:c7:27:01:84:8e:db:9f:c5:1b:cc:08:e7:6d:25:c9:3c:c7:
         75:fd:e0:de:5e:11:66:2e:1e:b5:22:72:52:ff:15:17:6c:06:
         72:47:a5:3d:7e:ad:62:a7:c3:2b:27:ee:e4:8a:ca:d6:dc:09:
         61:ff:d6:6a:73:f4:01:d2:c7:37:7f:d4:9e:db:c5:ce:50:bd:
         d9:ed:89:70:64:eb:d6:9a:90:de:3a:18:bb:4e:e3:e6:d9:ee:
         60:f3:43:bf:3e:b4:3d:ba:db:d4:7e:16:57:23:49:3e:d8:76:
         0d:3a:6a:82:6e:6f:ad:e0:a9:36:73:4e:68:d1:0a:82:cf:e3:
         47:95:18:57:53:09:85:31:aa:8a:fc:09:53:d0:b6:2e:b1:48:
         ba:b0:fe:e4:d3:aa:0c:2a:af:6e:c4:a2:fb:bd:c3:c7:4b:a0:
         56:0c:29:92:77:7a:89:ff:f2:c8:18:2f:b8:05:38:54:56:aa:
         7e:00:c2:35:b5:bd:1c:04:b0:ab:00:02:f1:06:fa:40:c2:e4:
         8f:86:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:30:39 2025 by rpki-client