Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa
File:                     d38b303a-920e-3f94-8e2a-efd3d1740358.roa (raw, json)
Hash identifier:          RXLl+C4dUsfI7an0DZvFLm9BlcZK+cbMgMirLumfZFA=
Subject key identifier:   FC:A9:8C:86:52:95:FE:8A:A1:3B:B4:FE:4F:5E:C2:47:A0:C9:9D:8B
Certificate issuer:       /CN=17e4ef75-3d46-4caf-8049-ad96976a0262
Certificate serial:       010D0C9F4328584BD5FB1764B56A4E9D348A4AC8
Authority key identifier: 32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa
Signing time:             Wed 12 Nov 2025 14:00:37 +0000
ROA not before:           Wed 12 Nov 2025 14:00:37 +0000
ROA not after:            Tue 10 Feb 2026 14:00:37 +0000
asID:                     400062
IP address blocks:        165.140.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d5:fb:17:64:b5:6a:4e:9d:34:8a:4a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e4ef75-3d46-4caf-8049-ad96976a0262
        Validity
            Not Before: Nov 12 14:00:37 2025 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=6c8a7e0e-5b1e-4791-a451-553394066c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:1a:7e:3b:72:cf:11:45:d5:a1:43:c6:19:
                    ed:93:26:2a:d5:99:9b:da:31:d2:11:ba:c3:9e:58:
                    fa:ad:e4:44:9e:1b:73:11:3c:87:ea:14:ae:6e:b4:
                    45:a9:7d:6c:35:51:50:bc:e8:50:39:01:9f:5e:db:
                    d6:e5:0d:d7:b0:ed:7c:3e:0c:53:e4:4a:c7:25:fd:
                    2c:e1:60:13:54:90:6e:78:cb:44:52:6c:09:3c:e9:
                    aa:7e:fe:ce:40:7b:0a:12:c8:4c:fb:12:5e:1d:46:
                    1d:c2:ce:51:fa:1e:6a:f9:c1:d0:80:47:23:fc:94:
                    fa:a1:64:d6:2c:39:25:32:75:cd:d5:1d:fb:db:66:
                    2b:23:b5:f6:0f:04:9e:47:9d:79:e8:41:f0:d9:a5:
                    da:84:b7:31:37:4d:4e:ac:de:0f:2f:84:cb:6d:bd:
                    2d:51:4f:f3:34:f3:23:3f:d6:11:36:98:a2:b8:ac:
                    8e:93:d3:d2:7c:be:20:2b:69:0c:6d:e8:db:da:f5:
                    3e:39:4f:ce:3f:96:e3:7e:04:e2:de:df:1b:c7:b2:
                    23:3a:40:ff:f7:72:72:60:5c:ae:e9:07:92:f9:97:
                    6a:9c:e8:fc:64:2d:a1:2a:48:26:11:3d:84:cd:9a:
                    b2:eb:33:b5:7d:df:c4:ef:4f:4e:24:21:31:1a:0f:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:8C:86:52:95:FE:8A:A1:3B:B4:FE:4F:5E:C2:47:A0:C9:9D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl

            X509v3 Authority Key Identifier:
                keyid:32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:6b:e3:a6:f1:f6:4d:6d:4f:66:a0:f8:7e:6c:17:df:9c:
         c1:35:c2:d3:61:b9:75:69:aa:d7:3a:8c:92:98:d9:c2:2c:77:
         bf:e3:57:d4:c4:7a:78:e4:b0:8d:04:9e:5f:b5:51:28:4c:d7:
         1a:24:56:c6:7c:19:51:1c:51:e1:2a:4e:ba:b5:45:8e:24:5b:
         59:7c:c8:db:2f:11:fa:71:da:96:bd:ef:9e:c0:4a:db:91:f5:
         fd:11:9b:f0:c1:9a:26:46:c3:bc:cf:68:28:42:ac:2f:ec:52:
         06:8b:cf:5c:cf:d7:78:4f:c2:0f:c0:35:5a:87:54:8e:a3:0d:
         ba:14:cd:d5:5a:40:81:15:5e:4a:ad:ec:da:85:4b:a9:ed:9f:
         24:30:b6:42:3d:07:bf:14:1c:69:ee:af:a2:74:99:a8:8a:b6:
         da:ac:cc:7f:ac:97:3e:d0:55:c2:e0:64:a5:41:d4:52:09:f1:
         4e:bf:76:04:68:ca:c9:eb:0a:b6:a5:18:e1:52:6a:be:11:92:
         5f:30:db:a0:ec:9f:d5:30:5c:f3:56:e6:a6:5d:a8:3a:89:51:
         e7:bf:03:8b:23:88:ec:db:ab:ff:f7:e0:67:e8:f3:59:05:a1:
         98:25:24:f4:2b:45:c4:1b:ca:03:b7:92:9c:68:2f:f1:ae:5a:
         a4:cc:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:11:19 2025 by rpki-client