Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          WK0PcJfAgkfEedasNFaiFY7V5OmwmBp8ghXfhSEVImI=
Subject key identifier:   E9:DA:5D:0E:A4:53:D9:23:58:29:C3:52:08:12:B3:C4:EB:94:7B:D1
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584BA0D25FCEE9EFBB41A46E9080
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:5f:ce:e9:ef:bb:41:a4:6e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=52eac971-1fe2-4e7e-9df4-6a96053c2ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:34:40:25:e5:be:de:ce:52:bb:48:e3:b4:
                    ff:4f:59:d1:b0:57:f3:c9:45:b8:fa:b3:35:13:48:
                    88:9f:9f:c4:67:77:27:dd:a4:f6:52:52:c6:cb:fc:
                    37:8a:7e:62:e1:60:df:e8:08:53:14:6c:32:aa:cc:
                    fb:20:1d:bf:a9:10:ec:49:4e:ef:a9:47:3c:47:b2:
                    06:8f:d1:1e:f8:ed:e5:62:61:5e:10:28:5d:6e:03:
                    3e:1e:7d:71:7d:f1:9d:47:c9:b8:3b:f5:3b:64:53:
                    85:a1:57:b4:28:c1:ab:ef:0f:21:e2:7d:f1:07:54:
                    91:94:da:a5:4e:04:3d:e2:1b:b2:2e:f1:90:11:c6:
                    36:3e:ef:51:c9:0d:27:5b:d5:c4:87:cc:02:48:4c:
                    1c:f0:f9:de:bd:2c:b7:1c:d4:b9:e5:cb:9f:c7:74:
                    eb:64:ac:60:48:11:a2:84:74:94:ff:42:91:4d:17:
                    b6:58:ee:51:af:a5:ad:cb:dd:2e:1f:f0:f9:d2:5a:
                    d8:76:c6:05:ad:0a:8b:7a:43:fe:1d:84:7f:b8:d2:
                    cd:17:5e:d1:e2:b6:88:83:c5:b9:71:3a:f7:e1:6a:
                    2a:43:be:21:ef:62:59:e1:86:fb:da:69:e1:bc:e0:
                    7b:e6:45:bc:54:0d:18:7a:ba:d1:a5:7d:18:7b:74:
                    a5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:5D:0E:A4:53:D9:23:58:29:C3:52:08:12:B3:C4:EB:94:7B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:7c:22:15:c3:0f:f8:b0:3b:0d:d5:df:b2:31:74:3d:c7:
         a7:98:9b:5d:12:d0:a6:5e:a6:aa:1b:f4:ce:49:88:cd:e9:ee:
         e2:eb:89:3f:ef:a5:5e:23:cc:37:f6:3c:3d:d1:6d:40:2e:76:
         86:fb:6d:f8:f0:95:0e:e5:b1:4a:79:ab:5c:cd:33:68:ae:05:
         0c:27:64:b8:44:3d:65:4e:d6:68:61:4c:82:5d:28:e8:b8:95:
         27:ff:87:e3:1d:ea:8d:01:ae:6c:01:6e:9a:19:7a:ff:57:de:
         89:8f:40:76:d7:f8:6e:91:37:0a:b3:67:a7:92:72:db:33:cd:
         6f:b5:30:76:fe:c3:6b:03:9c:2c:74:58:4c:c8:0c:04:6e:b1:
         94:01:6a:7a:25:6d:3d:ec:23:dd:56:9f:ff:b6:90:46:8c:30:
         12:ed:b1:a8:ce:21:d0:cd:af:cd:38:b8:3f:33:23:10:01:3b:
         71:6d:f4:b6:f1:03:a1:f5:a2:67:34:10:84:ee:bc:b3:be:16:
         30:9d:74:0d:08:f5:5f:89:0d:b7:7f:45:77:45:b0:32:92:e6:
         20:df:1b:bc:63:a2:6e:bb:5d:9e:0d:89:c1:b8:b6:90:7f:39:
         0a:87:e1:ad:cb:2a:72:b1:09:8e:97:33:af:ec:dd:ba:e9:da:
         a9:ab:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:11:03 2025 by rpki-client