Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/729361f3-bbb2-328f-912c-61edcbdc24af.roa
File:                     729361f3-bbb2-328f-912c-61edcbdc24af.roa (raw, json)
Hash identifier:          T95nEWHphxe75KQKrW8VtyPUa3LLQQXsyiTgALrn37Y=
Subject key identifier:   45:8F:6A:F1:CD:DE:73:3E:A5:4C:40:2A:DD:E3:46:ED:34:CA:47:85
Certificate issuer:       /CN=1c3c552c-5e23-4989-8af0-9450094442e8
Certificate serial:       010D0C9F4328584B83820A8AB09F070316AEAC40
Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/729361f3-bbb2-328f-912c-61edcbdc24af.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     8075
IP address blocks:        142.225.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:0a:8a:b0:9f:07:03:16:ae:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=50e04576-ae10-4d99-b0a5-cf915c1d774a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:6b:1b:eb:7b:d0:87:c8:a3:6b:a2:30:25:
                    57:80:4c:13:30:13:1a:39:e0:ab:25:2f:7f:aa:23:
                    d5:13:54:77:42:81:30:a7:9e:14:9b:f6:2d:87:7c:
                    ec:2d:2f:59:94:3e:f2:45:9c:20:5b:54:a9:80:d7:
                    52:4f:09:a4:0d:59:e8:fc:03:d7:4f:4e:52:f6:ef:
                    b2:e2:7b:38:de:30:2e:ed:bc:85:7c:19:a1:65:7c:
                    78:71:eb:f3:c1:f7:8c:7e:7a:96:ea:3e:33:de:49:
                    9c:97:6f:b3:a4:1d:c7:9d:59:4c:2b:68:e9:ba:7b:
                    4f:63:52:7f:65:a5:7e:87:f9:46:06:c4:4e:48:d0:
                    d4:f1:9e:84:e2:4a:70:5e:15:eb:2f:1e:32:1d:eb:
                    57:2b:62:bb:a9:ae:f7:cd:81:55:4f:70:c6:b7:45:
                    e5:4b:3c:46:9e:ed:c0:81:ba:7c:87:da:cc:83:6f:
                    d5:74:bd:89:b6:13:64:8c:42:6b:b2:89:34:8c:66:
                    fb:ff:2b:33:52:4e:15:36:8c:23:53:22:85:ae:33:
                    96:97:56:95:39:4d:41:42:dd:b8:2e:b3:3c:16:74:
                    5f:ad:86:c4:41:fd:47:02:cc:57:bb:bf:26:30:7a:
                    a3:5d:ce:54:46:3f:56:8a:a1:73:9d:c8:51:18:a3:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:6A:F1:CD:DE:73:3E:A5:4C:40:2A:DD:E3:46:ED:34:CA:47:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/729361f3-bbb2-328f-912c-61edcbdc24af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.225.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:c8:98:6c:6d:f7:2e:ab:0d:03:52:de:91:f6:51:33:74:
         5e:57:25:f0:d2:33:81:bf:96:1d:de:a3:91:0d:66:22:9c:08:
         4e:96:f8:6b:1e:91:4f:97:15:67:3a:60:4f:a8:c9:7d:0b:cf:
         67:4b:70:cb:5b:1b:18:69:2d:1c:b1:be:f0:14:db:38:02:67:
         2d:ea:92:a1:70:81:dd:86:9b:2a:1f:50:8e:85:d6:b3:99:64:
         44:23:9e:1c:de:65:a7:9d:d6:64:fc:af:6e:8a:20:37:7d:10:
         84:27:a9:0b:28:69:27:a9:88:28:b1:f7:17:7f:1a:e9:3f:0d:
         2a:13:d9:76:cc:03:91:52:b7:c1:73:b5:ec:c0:8e:48:85:4a:
         7b:e8:cb:21:b9:8d:c3:19:e6:d4:a7:fb:46:41:58:05:c1:76:
         e3:37:36:b3:53:86:3b:cb:60:03:cd:e7:de:e0:c7:48:58:88:
         b6:3d:27:6b:b0:1f:a5:d8:37:1c:a2:27:ec:4b:aa:31:36:93:
         49:04:01:83:7f:ab:c8:da:12:46:a0:2f:d8:6a:82:20:b4:6b:
         b2:40:c0:c9:23:3e:63:ea:84:b5:78:2c:1c:e8:8c:bd:75:e5:
         c5:d4:56:76:43:83:b7:d0:a5:22:29:73:9f:d2:3e:50:63:5c:
         11:09:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:23 2025 by rpki-client