Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
File:                     ea0d431d-21f5-319a-8cfd-d8a10f695194.roa (raw, json)
Hash identifier:          +qTlNwon87UfTDlXQBfeGeiV+MtShfPDxBMjSNLGWzA=
Subject key identifier:   13:97:E5:13:05:91:2C:93:69:AD:67:36:31:43:9B:6E:E7:D4:27:7C
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584BA39D2776A89A0F7033F1F180
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16696
IP address blocks:        192.81.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:27:76:a8:9a:0f:70:33:f1:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=323fb82e-8b60-44ee-b417-1b11ffd8bfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:3a:e0:bf:db:48:58:fd:c1:cf:f9:ff:c8:
                    90:29:ca:67:ce:24:76:80:6e:60:52:41:99:07:43:
                    ee:11:0b:8c:c4:89:8f:7b:28:72:eb:d7:89:a9:94:
                    d0:56:89:0b:69:46:ad:28:38:49:df:a1:e2:b3:f8:
                    0d:c7:ad:03:a2:89:b7:18:63:0b:31:ec:f7:89:39:
                    f0:9a:02:ac:df:18:14:a1:c4:37:d1:38:1c:ca:c4:
                    7a:53:20:0e:2a:c5:0a:9f:d4:df:ca:a5:ef:d8:90:
                    80:68:de:f0:31:5c:79:1e:7d:80:61:02:04:89:d0:
                    ad:b7:d8:6c:97:1a:bb:a2:42:c3:91:a4:ed:a4:5b:
                    ab:62:0c:b8:ef:71:f3:23:28:18:a2:59:1c:0d:50:
                    c3:3f:95:09:09:94:92:d0:92:5d:11:22:d0:69:38:
                    02:6b:c0:12:34:d5:8c:5b:0f:13:26:42:f3:44:55:
                    ae:df:19:2d:ef:1c:a3:14:13:94:78:c6:a4:43:ca:
                    0d:0e:47:a3:43:ac:a4:0b:22:15:37:c4:72:5d:fb:
                    eb:a0:05:48:41:aa:30:2e:c3:cf:bf:f3:7e:80:2f:
                    c4:ad:0a:df:64:09:20:1b:73:cc:6a:5a:5a:8a:6d:
                    3a:7e:38:1c:e2:cd:b7:26:84:91:76:fd:11:41:54:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:E5:13:05:91:2C:93:69:AD:67:36:31:43:9B:6E:E7:D4:27:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:d3:d6:14:51:73:0e:14:9c:ee:58:02:ec:38:ad:6c:93:
         44:93:03:b3:d1:f6:47:70:4a:f7:e0:b4:c9:ef:b7:40:d4:ed:
         87:fa:6c:93:ad:54:01:be:bd:5e:41:39:a9:88:ec:2c:00:26:
         0a:54:cc:a0:26:b5:16:35:63:ac:98:6b:7e:e9:35:c4:58:32:
         2f:bd:be:eb:e2:f0:4c:db:b5:7a:72:59:91:d5:a6:92:44:62:
         32:11:0e:a6:75:28:83:28:a9:ef:cd:ea:54:7d:92:32:15:80:
         04:5c:f7:6c:bf:b4:97:eb:25:fd:cb:b1:af:3d:85:73:2c:ec:
         00:71:dd:03:1e:9e:5b:69:90:6d:0b:34:14:3c:13:08:fe:ec:
         2c:05:df:00:e2:7e:ff:ff:e7:da:05:8a:e9:13:25:c4:bf:58:
         52:16:14:c4:9e:09:47:b0:1e:7d:0d:6a:36:81:2e:89:27:22:
         33:ee:cc:80:cc:07:33:81:98:b0:13:b5:14:c5:0a:9c:3f:c9:
         ff:0b:17:78:dd:f3:a4:ac:f6:ae:67:e4:3a:0b:7a:f7:46:c5:
         89:34:2e:be:0f:0d:7b:d5:ff:fc:1c:b4:30:e8:e6:b2:80:a4:
         d8:41:5c:8a:2c:63:49:7b:35:ae:8b:3c:28:99:95:95:6b:4f:
         b3:58:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:50:08 2025 by rpki-client