Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/48d629ce-154c-3c86-9db3-c02cfd89317d.roa
File:                     48d629ce-154c-3c86-9db3-c02cfd89317d.roa (raw, json)
Hash identifier:          7wfmC/4TI9IfoQSYLSDYIK2l/+IjhSyjb6fqt5vSDNM=
Subject key identifier:   84:39:45:16:0B:B2:70:D5:B4:8F:F4:0A:5C:F3:FF:A3:5B:50:3C:60
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584B9E07BEC7A6C85559B4D9E040
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/48d629ce-154c-3c86-9db3-c02cfd89317d.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16696
IP address blocks:        141.193.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:be:c7:a6:c8:55:59:b4:d9:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=65efd947-3848-42dc-9753-7452be497945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:c2:68:83:0a:dd:18:b2:a4:d8:f1:d2:e5:
                    2a:60:86:43:06:fd:10:ee:d4:84:f2:d7:74:d6:6f:
                    28:1d:0f:aa:19:79:12:23:20:4f:f5:2f:ec:5f:23:
                    08:58:fb:61:75:a0:ac:88:67:a7:d2:57:f3:f8:0c:
                    16:14:d0:75:dd:66:a5:55:82:83:bb:fd:2e:aa:12:
                    03:4e:85:22:56:ad:9a:2c:63:0e:98:52:43:49:08:
                    90:c8:c0:cc:9f:75:81:f6:56:78:88:82:a7:58:f6:
                    a9:f0:91:84:9c:be:14:47:61:30:7b:51:70:5c:61:
                    98:9c:bd:2f:80:f6:b4:88:43:31:df:22:3b:1a:ed:
                    3f:a7:2c:13:ce:78:ec:60:5a:e3:a6:a8:10:9a:23:
                    71:03:19:ae:9a:ee:3c:bc:b2:28:fa:61:04:df:1a:
                    cc:fe:4b:21:ec:16:28:fb:05:d8:d7:0e:0e:eb:e8:
                    6b:5d:6e:e2:5f:0d:5d:89:00:53:a2:b8:33:16:6f:
                    20:76:f6:fc:52:d5:91:30:89:47:8b:55:b9:89:b0:
                    65:50:ba:00:32:44:31:15:51:47:ff:50:71:1e:38:
                    e8:0e:e2:e3:6b:ca:1e:70:59:fc:ea:1b:99:af:a8:
                    41:be:7c:fc:a3:43:9a:2e:74:63:e0:91:bb:9b:4c:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:39:45:16:0B:B2:70:D5:B4:8F:F4:0A:5C:F3:FF:A3:5B:50:3C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/48d629ce-154c-3c86-9db3-c02cfd89317d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:cd:7f:a2:7b:55:69:bb:d5:98:95:bb:cb:dd:9b:52:48:
         d5:d6:d0:74:8e:97:4f:0b:5d:66:da:ef:f9:e3:38:16:d9:40:
         b7:fc:3a:5b:96:9d:ff:84:c0:3e:cb:22:a6:66:b9:c9:73:7e:
         38:8f:6b:8c:98:5a:38:ab:0f:6c:ef:bd:84:98:b9:46:03:f4:
         87:67:d4:f2:99:46:38:0a:63:94:3f:c4:7a:3f:56:88:2c:87:
         d5:e2:ee:3e:7e:cb:e1:b3:61:f0:47:7e:73:ea:f6:d9:2a:36:
         ee:cd:df:38:a8:42:44:ab:c9:66:12:27:af:64:03:a3:dc:2b:
         ec:25:af:d2:08:b2:d0:d7:df:37:6f:62:df:44:86:e6:67:91:
         9d:84:61:3d:80:1a:73:ce:3b:29:45:7e:60:ed:17:29:bc:f6:
         39:50:16:e9:cd:35:d5:2a:ce:06:10:5e:b3:68:91:52:29:45:
         f3:80:34:9e:26:b5:29:d2:f3:7f:aa:72:8d:ee:62:be:f5:d5:
         f2:1b:7d:c9:18:6f:99:20:81:1f:d6:1d:86:75:0b:65:c7:ed:
         88:89:fe:17:a7:b7:80:d0:f5:46:a7:0e:54:fb:a8:e4:26:b7:
         31:d7:60:b1:df:68:9a:b8:3f:61:4b:22:e2:99:98:94:47:26:
         fa:2d:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:45:39 2025 by rpki-client