Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
File:                     51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa (raw, json)
Hash identifier:          Ik8LJC0LgQ44A03toG0sx1jWogqGsrV8zjZZCSZpxPQ=
Subject key identifier:   E9:64:D1:7C:46:0A:C1:1E:7A:35:05:24:43:05:33:25:96:17:39:1E
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584B1F017783E6B9ED9D7FB2ABC0
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     11325
IP address blocks:        172.85.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:77:83:e6:b9:ed:9d:7f:b2:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ca326a6b-580e-405b-9ffb-aa100d032a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:1e:b2:bf:76:6f:0b:e6:d4:f8:af:71:26:
                    d5:4f:f5:68:96:b2:dd:be:16:23:44:7f:5f:2b:7e:
                    6c:7b:52:30:44:de:8c:8c:6a:44:15:18:fe:39:33:
                    5c:d7:49:20:d5:33:5d:2d:8d:3f:dc:3f:b0:b5:01:
                    2c:50:f0:06:d6:43:ef:34:da:40:ed:b0:88:f0:a9:
                    4d:97:c6:0d:5b:a2:f3:80:f8:19:1a:fd:76:46:dc:
                    90:6f:7c:8a:5d:1b:35:1c:66:b1:73:b3:27:18:1c:
                    83:2b:6f:83:a6:d3:af:b6:5f:aa:64:9d:0b:01:96:
                    4c:6c:b8:98:59:1c:c7:00:fc:0e:ea:ab:02:00:48:
                    2c:16:8c:e5:69:dc:76:04:65:d1:c2:0f:b1:ad:d6:
                    c9:42:d2:03:25:a2:36:af:03:4c:98:37:c1:b6:ac:
                    b3:1c:7e:d1:cb:10:e6:ce:6a:0d:e0:23:2f:03:86:
                    f7:91:28:f8:9a:b3:0e:92:67:b8:7a:1d:ad:70:5e:
                    e6:50:66:d3:5f:3f:09:4d:30:df:e8:b8:76:07:26:
                    82:12:8f:f2:2c:aa:f8:ec:c1:c8:45:26:ab:e5:83:
                    5f:a6:3c:ac:9e:c2:49:41:b7:60:a3:38:f0:22:83:
                    1d:e7:ff:30:91:52:10:4c:e7:83:da:4f:fe:dc:15:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:D1:7C:46:0A:C1:1E:7A:35:05:24:43:05:33:25:96:17:39:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:85:31:9c:da:05:7f:3c:a1:87:b7:39:1a:18:e6:a4:dc:
         b6:14:54:af:7e:5d:ee:2c:8d:40:dc:50:c1:b7:78:fe:c4:7a:
         07:76:1c:f0:c7:c3:43:a9:1d:a4:ca:22:e2:93:55:ba:c9:11:
         7a:df:0c:88:b7:a9:8a:6c:dc:23:ea:7e:56:c4:37:c4:45:cb:
         9d:89:ab:30:ad:0b:fa:76:a5:29:e1:a9:b4:18:72:f1:e7:d0:
         ed:5b:3d:df:6c:15:29:7d:72:f9:77:a6:27:54:d8:2a:40:2b:
         01:6a:15:1f:11:9d:b7:b4:49:59:90:a0:c0:b4:bd:2c:72:dd:
         87:e3:c7:40:dd:9a:b4:5d:c3:4b:43:cf:d3:af:80:5c:65:1a:
         2d:ef:9a:68:e3:08:8a:70:ae:31:9e:18:48:dc:f1:6a:84:0d:
         37:18:8f:c9:4f:d3:19:bf:5e:1a:a2:2c:ed:40:64:db:ba:5a:
         7d:1e:73:6c:96:d9:5b:b5:ac:a5:cf:14:e6:e7:72:1b:cd:52:
         ed:73:21:cb:14:9c:f2:73:59:e2:2e:b6:14:a1:45:87:0d:af:
         df:bd:2b:5a:d1:ea:57:a9:a3:c6:49:81:c2:32:b8:bc:be:66:
         20:28:00:65:14:40:06:ee:d7:be:02:0d:aa:92:5a:17:03:15:
         47:38:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:15 2025 by rpki-client