Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/3cae9ef6-d406-3086-8503-3d95497508fc.roa
File:                     3cae9ef6-d406-3086-8503-3d95497508fc.roa (raw, json)
Hash identifier:          mTHHRoGdHPEuiitItuBj+NJBiZDe92k/mB/Nwo5UedU=
Subject key identifier:   35:8D:E1:15:67:EF:5D:BA:6F:6B:D1:D2:59:DB:23:02:6B:FF:BD:46
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584B2A2C309BC57D4E427EC6CF00
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/3cae9ef6-d406-3086-8503-3d95497508fc.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     55039
IP address blocks:        162.218.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:30:9b:c5:7d:4e:42:7e:c6:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=a2d2a5c1-f326-465b-82d0-9d1347578182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:67:10:02:33:32:e1:7f:ca:97:40:61:1b:
                    38:62:d8:7f:bc:7e:9b:ec:06:7b:40:87:41:cc:de:
                    03:01:a4:5b:10:19:17:83:be:ed:15:bd:18:1c:50:
                    d9:27:c2:eb:58:32:8f:a9:c1:2c:90:77:86:0c:b2:
                    65:6e:52:30:ad:1b:01:0c:21:0d:00:dc:14:c7:13:
                    4e:47:b9:71:0c:f8:bd:d8:5e:2a:0a:8f:03:e4:0e:
                    1b:3a:6e:c9:89:18:78:89:f8:39:7e:b5:db:49:6c:
                    b9:73:90:22:6d:ca:a9:e6:2c:36:37:19:02:d4:31:
                    bc:e4:d0:c1:10:98:a1:09:dd:18:bf:05:9d:e9:a8:
                    04:ab:99:21:3e:1a:49:fe:24:d1:70:c9:d6:77:05:
                    6e:42:a2:ab:96:96:a6:c5:8f:15:15:75:f5:50:35:
                    76:64:66:41:40:0e:95:91:fe:16:bf:22:7c:d3:29:
                    f7:dc:4c:fd:c8:4c:1f:f8:13:2c:a1:29:3a:c3:a7:
                    87:55:03:01:58:53:ae:29:11:e9:89:b4:f9:16:ee:
                    ba:52:18:3d:8a:3e:36:97:23:ff:2d:54:bc:80:dd:
                    fc:57:de:36:df:18:9d:23:73:c0:29:69:bd:78:0f:
                    dd:7d:0e:12:5e:ee:c4:4d:23:25:08:a2:59:22:0a:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:E1:15:67:EF:5D:BA:6F:6B:D1:D2:59:DB:23:02:6B:FF:BD:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/3cae9ef6-d406-3086-8503-3d95497508fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:89:a1:15:d0:3a:67:b1:61:91:5c:29:3d:b7:08:8e:24:
         df:12:d1:7d:a8:3f:36:bb:f4:9c:f5:68:cc:5f:95:14:00:97:
         a8:f5:6d:58:fc:88:41:71:5f:29:0f:86:a8:a5:4e:7c:86:d5:
         08:4a:2a:f7:8d:b4:1e:8f:46:55:bb:85:2f:bf:7a:d9:37:ba:
         fb:3c:e2:71:06:99:2d:f9:de:c5:36:d5:3e:2d:27:c3:b2:ab:
         b2:41:55:97:b3:32:c2:59:53:23:bc:a6:77:30:11:2f:df:e5:
         aa:7c:10:ae:a7:87:71:33:d6:ed:26:a7:87:31:68:23:10:f0:
         2d:3e:7d:c8:38:0d:12:e4:a2:63:6c:2f:ee:fb:a5:21:39:70:
         ef:d3:b0:84:7c:b0:b1:d4:96:91:10:f7:e2:5a:1d:25:3b:35:
         1c:ac:0b:42:9a:da:48:dc:53:b4:51:44:44:df:9e:7e:6e:8b:
         0d:27:8c:f8:ba:c8:ca:5f:fe:ab:b1:5b:fa:48:18:2a:7b:08:
         2c:8a:14:c9:93:61:2e:22:c1:52:b0:f4:1c:12:4b:01:fd:e8:
         5a:9b:aa:df:12:85:6c:3e:e1:bf:65:36:05:a9:5e:92:04:52:
         da:cd:49:8a:f5:e1:a9:73:4b:3a:aa:12:d4:84:96:af:09:a8:
         93:c1:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:04:34 2025 by rpki-client