Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
File:                     fed315c7-e9df-35c1-b17c-1e75b08b0642.roa (raw, json)
Hash identifier:          jzazV1I6KauAHsMbt5nJj4xCP4DqY7t1ea9H13X2lgc=
Subject key identifier:   91:B4:EA:07:E1:67:51:D5:7D:65:28:38:4D:5E:2F:D7:6F:86:A5:36
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584B0E415152D5BE2C3433FF7C00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     399471
IP address blocks:        163.123.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:51:52:d5:be:2c:34:33:ff:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=5899dd6e-a807-430e-b36b-9993a4bba36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:5c:ea:1c:55:bc:ef:20:70:61:c8:ee:38:
                    c1:37:6c:dd:6b:d7:a3:01:e2:50:89:90:a8:4c:6f:
                    4e:5c:f4:e5:58:20:22:2a:e9:81:8e:a2:01:78:3c:
                    49:72:ea:cf:2d:ce:f4:a4:92:99:05:f0:1f:53:d8:
                    24:6a:49:2b:59:89:67:8b:e0:a4:0c:66:f8:6a:dc:
                    9c:b7:d7:99:94:6f:6b:3d:8b:ed:71:44:38:e2:56:
                    3f:a1:fc:dd:a2:7b:b5:6f:d5:0a:7c:16:fd:46:21:
                    3f:46:c4:74:20:d2:e8:1c:b8:05:73:fc:a0:6b:47:
                    ba:aa:ee:d9:d0:eb:3b:6d:3e:ee:b5:dd:ea:bf:1e:
                    db:7e:c9:50:20:fa:3a:bf:30:b1:7a:3b:08:62:de:
                    08:2c:eb:8e:79:81:24:73:0e:b9:94:a1:fd:e2:aa:
                    44:e3:d2:f8:ad:6b:03:bc:08:d0:d0:7b:b5:ee:3d:
                    93:cb:fe:73:d7:06:cc:93:e2:73:f5:09:4b:d1:da:
                    d6:70:38:79:97:f8:4d:71:a6:38:8d:89:72:4a:c9:
                    eb:92:37:6b:8a:a2:23:e2:37:20:e0:df:6e:9d:c6:
                    97:25:5b:a4:49:3a:ff:d5:c7:19:3e:62:4f:6c:19:
                    33:36:ba:53:f0:17:b0:e5:ab:9f:ac:fc:80:84:29:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:EA:07:E1:67:51:D5:7D:65:28:38:4D:5E:2F:D7:6F:86:A5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:83:85:84:67:50:12:5e:78:23:08:4a:93:fc:b9:51:85:31:
         19:3f:4c:6e:f7:00:e5:37:aa:6f:6b:42:78:04:fd:b9:3f:fe:
         95:9c:1a:94:4a:91:ea:27:4b:e0:0d:70:40:d2:a6:9e:63:20:
         8a:38:d6:d5:be:e2:e8:24:f6:41:5a:ab:75:a0:97:4c:8d:f2:
         6b:6d:6b:c0:62:fb:5c:1c:99:9a:49:6e:96:33:7b:ac:2f:52:
         dd:49:76:8e:47:e7:e9:42:01:86:32:51:71:83:4c:bc:5f:8f:
         c0:29:d9:59:e9:3b:ef:7d:1d:28:ed:78:29:8a:e8:e1:15:e2:
         be:7f:82:82:2f:bb:15:10:4d:6e:b4:e9:9c:c6:9d:9e:e2:36:
         03:8c:e9:87:ce:8b:32:af:bd:f1:fc:a9:ce:49:5c:27:b0:ec:
         a8:a1:50:1d:57:03:1a:f2:1b:b7:37:59:9e:65:53:79:55:76:
         aa:9b:58:cd:c9:c8:7f:40:c5:ac:b5:e0:ff:b6:b7:78:39:e5:
         6a:a5:30:1f:34:d0:c1:37:20:0f:66:ef:56:82:3c:bf:9b:e9:
         40:9b:6d:a2:da:5f:5d:ce:12:13:87:c1:45:71:74:e3:1c:aa:
         56:0d:1e:32:09:b7:4b:fc:66:4b:d7:f4:46:d0:b8:ee:fd:c8:
         45:dc:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 22:06:15 2025 by rpki-client