Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa
File:                     12d92f26-e702-3244-8b8a-550c4a4b00e3.roa (raw, json)
Hash identifier:          NBu7ShyLPTuBcacJo8d5POkQ9WKAEbuNxp7zBTvjp8k=
Subject key identifier:   F6:39:9F:DF:8E:72:6E:93:29:60:AB:42:7E:BA:16:69:95:8E:38:74
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B2A2C20985D0176E9DAC38A30
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     35039
IP address blocks:        157.133.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:20:98:5d:01:76:e9:da:c3:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=0ad53d76-c48f-4c4f-a6ee-b0e080b16196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:98:8b:05:44:fd:db:98:09:06:86:8a:f3:
                    2b:e3:37:2e:0d:42:8a:5f:15:25:7d:cc:fb:b9:c4:
                    3e:13:c0:c6:6c:02:a5:26:d6:e9:0f:be:d0:0c:59:
                    b5:a4:c2:28:49:cb:05:d5:7d:6f:cf:16:e4:68:1f:
                    2e:68:7c:e6:d0:de:1a:34:ca:51:88:e3:e2:40:30:
                    d2:8a:3b:d2:5a:7b:4c:96:3d:04:be:b8:96:ab:29:
                    c5:06:61:a0:f3:91:ee:f2:b7:c9:94:d8:1b:34:3c:
                    37:46:9a:0e:8f:1e:ed:08:f9:82:5a:c0:a8:e0:88:
                    df:80:42:8a:98:da:53:ee:14:38:fd:c8:da:c7:25:
                    04:40:d7:b6:91:a4:ca:76:84:72:9b:1d:6e:24:99:
                    e4:28:2d:58:de:05:78:61:67:80:58:40:eb:7b:c2:
                    07:f1:93:5a:2a:40:0e:bc:9d:9e:48:ee:ac:26:05:
                    bd:bf:18:98:52:73:8d:0c:b8:1b:3b:00:9f:b3:63:
                    59:4a:cd:2d:11:18:a3:7b:14:50:a9:c0:5e:27:ab:
                    cd:5a:cb:04:06:46:db:b3:51:3c:72:5c:d4:4d:8c:
                    3b:6a:03:e4:cb:b3:7f:3a:51:95:8c:13:79:74:b0:
                    a5:f1:67:30:37:2d:f7:42:21:8a:ca:30:13:7b:37:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:9F:DF:8E:72:6E:93:29:60:AB:42:7E:BA:16:69:95:8E:38:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/12d92f26-e702-3244-8b8a-550c4a4b00e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9d:be:2c:99:76:d3:6d:c0:72:84:26:05:d0:e0:cb:1f:f2:
         5d:cb:85:e0:aa:24:3c:64:bb:d5:f4:aa:96:a9:51:57:b1:5e:
         2f:f6:e9:c5:f6:87:20:75:0c:f3:e5:55:dd:3d:59:ef:a3:03:
         b7:d8:05:78:76:57:3b:ab:02:20:c7:4d:ba:58:d7:27:92:7e:
         91:e4:bf:1b:ad:92:23:1b:56:2c:a2:c5:5b:54:ba:d6:0d:a7:
         45:3b:20:77:cb:0d:8a:8f:50:66:f7:55:64:a7:e9:c5:d1:bf:
         6d:4c:80:85:da:bc:1f:91:26:7c:45:67:25:db:07:9e:84:f2:
         73:3c:8b:55:06:e5:8e:32:1f:ff:2f:74:5d:42:d6:e6:c1:7c:
         f3:c5:5c:b9:43:6c:3f:27:d6:7e:69:f1:95:23:2e:48:33:2d:
         15:5c:8f:75:0c:57:cc:f9:aa:57:40:92:f0:55:22:46:25:9a:
         5d:88:35:53:4d:03:bd:3e:8b:18:65:6f:f1:bf:3b:74:8f:17:
         4d:b8:2e:27:60:cd:69:1e:2f:59:26:89:fc:c4:a8:d2:45:d8:
         cf:98:31:d8:b6:96:34:3b:85:7f:c3:10:33:d8:7b:57:d5:8c:
         0a:1a:fd:ea:73:e2:54:94:f0:99:36:da:7e:da:55:9e:37:3e:
         7f:6e:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:43:38 2025 by rpki-client