Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1e0438c8-c8a6-39f2-9eaa-04f4eecdb598.roa
File:                     1e0438c8-c8a6-39f2-9eaa-04f4eecdb598.roa (raw, json)
Hash identifier:          MuDp9ELnYESBUcKLBEf1fhUbJVi6TymXIwYniQN9YHw=
Subject key identifier:   E5:3C:12:9A:A9:76:FF:E6:A0:F7:2A:FE:E1:E6:E6:97:7D:F0:20:21
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584B9E07D61C0428B0FB7198C680
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1e0438c8-c8a6-39f2-9eaa-04f4eecdb598.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     14114
IP address blocks:        169.145.97.0/24 maxlen: 24
                          169.145.98.0/23 maxlen: 23
                          169.145.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d6:1c:04:28:b0:fb:71:98:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=7a48b563-f3f1-4aec-82de-8c39428f2ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:51:89:ea:09:e2:3e:81:f8:ba:2f:c8:c0:
                    00:c8:ad:77:8c:6c:d9:1b:9b:20:e3:c2:80:1b:b8:
                    4b:81:88:8d:e7:8d:17:77:0d:e1:eb:b6:74:d8:28:
                    1e:7f:aa:cf:fb:db:d0:ea:af:a0:3c:62:50:cf:d5:
                    4e:b4:cf:37:5e:00:48:17:dd:8a:8e:b0:7d:bc:59:
                    3b:5e:80:a8:1f:52:94:61:4d:b9:d6:12:76:72:73:
                    af:ab:7b:31:6a:68:b5:82:a8:18:dc:04:09:40:d0:
                    e8:6a:51:95:2c:c8:bc:4e:40:69:4a:cb:cc:1b:32:
                    a8:23:5b:c7:49:0d:c9:09:a4:7f:ba:1c:51:d4:03:
                    51:ef:23:33:cf:c8:ab:10:a1:83:d8:59:5c:91:27:
                    63:ad:8a:df:34:43:2f:ce:a0:32:99:75:6f:18:e4:
                    85:6a:cb:11:4e:51:30:00:d4:19:fa:64:49:de:cd:
                    3d:30:04:17:a2:34:3e:76:fc:8f:54:8a:08:15:b3:
                    b9:9d:4b:2d:c1:32:2b:71:79:42:0f:b9:50:f4:1d:
                    47:4f:20:ad:20:eb:1f:8c:de:5e:de:f0:c6:b7:95:
                    30:13:58:a6:cb:b4:a3:fb:7e:95:09:16:aa:c9:18:
                    d2:a3:80:74:aa:c3:8d:5c:76:68:c7:f1:23:6d:0f:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3C:12:9A:A9:76:FF:E6:A0:F7:2A:FE:E1:E6:E6:97:7D:F0:20:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/1e0438c8-c8a6-39f2-9eaa-04f4eecdb598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.97.0-169.145.99.255
                  169.145.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:c5:6a:36:e0:04:b2:c7:00:43:9d:f5:48:6c:35:52:c5:
         b7:3c:f0:02:af:41:01:ae:ea:3a:b5:9a:a2:b8:77:7a:5f:56:
         98:d9:b5:32:94:99:cb:13:58:4f:71:30:ab:6b:5c:f8:0a:ba:
         d8:92:58:69:cd:22:07:22:9a:b4:22:39:30:2d:71:d4:36:d0:
         4f:b3:03:99:2e:ca:c0:99:c3:e7:9c:a9:17:81:99:1b:d0:4b:
         09:be:f4:e1:97:42:d4:b0:1d:2a:a2:02:a2:0f:4e:5f:8e:c3:
         3d:1d:5a:18:aa:7d:28:55:af:29:52:23:ae:b7:e2:93:a6:2c:
         cd:64:ba:64:15:bf:f7:9a:3c:53:63:bb:7b:b0:5a:e0:83:a7:
         53:bd:57:91:1a:32:a4:d3:c7:ed:b1:3b:b7:84:75:1a:fb:c2:
         b6:94:6d:10:08:c3:32:d6:c5:77:1f:bc:7d:84:66:ab:24:44:
         0e:c3:80:32:bb:be:a9:33:30:c9:45:a6:ae:c8:a0:c7:4a:d8:
         b3:65:b2:d5:94:74:47:e3:6a:ed:2b:fd:fe:66:83:69:01:00:
         7f:c3:fa:55:d5:1f:68:eb:a2:16:de:cc:5e:f9:9c:a0:5a:04:
         4c:8f:f8:df:e2:66:59:a5:ad:a4:24:f7:26:50:ae:f4:a7:d7:
         93:a2:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:40 2025 by rpki-client