Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65c7d827-bf34-36b1-8cc6-67da02186e94.roa
File:                     65c7d827-bf34-36b1-8cc6-67da02186e94.roa (raw, json)
Hash identifier:          JEc9lOjDX1BDU0TsUTbGOTNAYiOELIOoymQJVukSSOQ=
Subject key identifier:   B9:87:E0:68:ED:A1:CD:BC:17:C8:0B:B9:3F:04:56:D7:3E:B2:A7:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B3454A8F4EFEA12C58D137200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65c7d827-bf34-36b1-8cc6-67da02186e94.roa
Signing time:             Mon 15 Sep 2025 16:20:19 +0000
ROA not before:           Mon 15 Sep 2025 16:20:19 +0000
ROA not after:            Sun 14 Dec 2025 17:20:19 +0000
asID:                     399471
IP address blocks:        144.225.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:54:a8:f4:ef:ea:12:c5:8d:13:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 16:20:19 2025 GMT
            Not After : Dec 14 17:20:19 2025 GMT
        Subject: CN=1113c7bb-7a79-47ce-afe0-623119f0e640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:b9:9b:5b:1c:dc:01:0c:b0:6b:35:2f:4c:
                    bc:dc:74:da:02:d9:37:04:95:0f:6c:e7:ee:f2:c5:
                    ec:68:a2:9a:96:97:7f:a8:9e:98:a9:49:4f:cf:95:
                    fd:ee:77:5f:56:49:37:59:66:c9:f2:48:eb:08:4c:
                    c7:03:ab:f0:c5:c3:ee:da:b5:99:4a:83:94:f4:9f:
                    58:c2:5a:c4:fb:40:3d:90:fb:f0:e7:46:61:24:6f:
                    cf:64:f1:2b:9c:20:61:23:d6:94:b9:bc:00:a7:89:
                    36:f7:98:a6:d7:d2:26:ad:d0:52:ec:1e:6a:c0:70:
                    ef:f9:01:30:0d:ee:64:ab:ed:71:a2:b6:c6:8b:c9:
                    57:b9:7a:b9:2c:19:2c:c1:75:69:a2:13:ed:54:d5:
                    76:5d:0b:d3:72:1e:f4:19:f8:5f:d2:7e:2e:97:b5:
                    07:10:bb:6e:5f:c3:59:d2:66:cf:57:ce:4a:92:7a:
                    8e:f6:23:e8:f8:96:ec:e6:49:43:f2:fc:3f:82:a7:
                    58:5b:32:56:ff:36:f5:57:36:a8:ed:74:7a:54:1b:
                    c6:ed:3b:a8:25:25:9f:38:51:13:20:7a:4a:92:e2:
                    e7:70:08:da:e8:22:93:ab:fc:e0:b8:90:9d:8a:b9:
                    62:37:13:35:f4:ac:74:4a:35:98:98:44:b0:f2:a3:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:E0:68:ED:A1:CD:BC:17:C8:0B:B9:3F:04:56:D7:3E:B2:A7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65c7d827-bf34-36b1-8cc6-67da02186e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:9e:88:d5:9f:56:75:99:58:34:b5:4f:a7:e0:b7:7a:77:
         00:fe:34:44:e3:63:90:41:ee:47:58:2d:ac:5c:fa:92:12:fb:
         16:db:4a:24:50:7c:bc:1b:18:3c:50:61:ad:54:21:d0:29:91:
         11:54:fd:4f:78:9f:0c:c3:61:ba:9c:dc:28:69:3d:86:88:a1:
         6b:ef:f3:0f:65:f8:59:08:fb:89:d5:f4:1c:ca:a7:b3:46:0e:
         ac:fc:3d:ca:e6:53:21:8b:54:4e:6f:bd:2c:6a:df:23:bb:af:
         37:f6:fe:be:93:e1:d6:03:0b:3a:91:be:ed:0a:e9:ec:5d:e4:
         80:92:e0:d5:0b:69:30:c0:c6:c2:15:f5:c1:ba:a2:d7:fd:96:
         dc:2b:d0:7c:04:04:0e:f4:db:4d:03:29:38:f7:92:67:c3:df:
         3f:a9:de:04:09:e0:9a:58:6b:12:d2:1c:d1:bc:89:b2:03:88:
         59:44:f4:df:bd:7b:f3:23:21:45:27:47:e2:7b:c3:e1:eb:40:
         69:f2:36:cf:c2:90:c7:d1:c0:d1:9d:b6:c3:8c:72:df:05:81:
         5a:33:6b:57:cb:79:e1:bb:ec:0c:dd:83:57:81:80:b4:78:73:
         ed:82:ea:26:20:66:ca:02:7f:e5:37:56:53:b4:0d:40:83:f8:
         b6:90:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:18:34 2025 by rpki-client