Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          81kKNCSwSdm6XwL8/tRo8KmUSBNec2DkIKT7MaQh/M4=
Subject key identifier:   8D:D6:46:80:F4:11:BE:24:21:53:3C:6B:BA:B3:F4:4A:9E:28:FD:70
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584B7DECA3DC917753C3D5CDCE80
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a3:dc:91:77:53:c3:d5:cd:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=9620560c-08da-4628-9701-905d515c6edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:4a:0b:d2:37:d3:fd:7e:c2:cf:8d:da:79:
                    57:c1:52:10:40:a9:66:d5:b5:f9:3b:ab:87:a0:a1:
                    80:0d:4c:0b:74:da:e0:10:d4:7c:2c:46:4c:85:4a:
                    03:29:5c:34:d8:6c:a8:09:38:60:4c:e1:fd:b6:cd:
                    c9:80:99:8c:21:57:94:f1:c1:72:7a:28:e5:bb:0b:
                    97:2a:96:8b:6c:13:48:5b:f2:1e:60:8a:20:de:0b:
                    da:0e:15:fc:e0:4f:ea:1c:5b:a0:af:4f:d4:ce:f1:
                    5c:66:3f:fb:29:0d:2c:2d:4f:c3:f3:17:97:a1:c8:
                    1c:49:c1:4b:e4:ec:ee:5c:e7:24:4d:c4:13:2b:b8:
                    74:b6:bb:d8:67:44:d3:2a:89:5d:d3:a1:6f:fd:a6:
                    92:5f:4b:54:71:64:ad:56:85:d9:30:06:eb:a4:f8:
                    91:06:ac:3a:64:2b:86:5b:cf:15:19:63:0a:41:8b:
                    99:c9:c4:8a:39:44:68:75:d3:3e:df:2f:d8:85:1e:
                    45:28:7c:60:ce:a5:b1:60:66:19:2c:88:b9:94:6b:
                    e9:3a:bf:fc:73:08:62:62:ab:7a:ae:f3:d5:0d:15:
                    cb:d7:a7:f6:28:32:52:34:b3:97:95:73:d0:ea:6e:
                    48:ba:1e:39:98:92:63:58:a3:c7:e4:71:0c:2e:1f:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:46:80:F4:11:BE:24:21:53:3C:6B:BA:B3:F4:4A:9E:28:FD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:e9:d0:b8:3d:ea:c7:73:e8:4c:65:15:24:2a:e9:71:75:
         e7:cd:6c:6f:90:d3:99:31:d6:5d:bb:9d:a0:82:e5:b0:6b:66:
         b4:63:15:69:38:6a:c5:47:2e:56:cc:6d:2e:2e:c5:b5:03:17:
         11:f3:a2:3a:bf:72:d4:7f:55:20:ca:1b:03:2a:fa:33:b6:d9:
         c2:f9:9c:78:af:5b:ad:19:3c:4e:f7:b2:d1:40:88:d1:8d:8c:
         f5:49:d4:1b:6c:51:98:4b:5a:1c:6b:7c:93:bd:89:55:3e:e6:
         33:b1:50:5f:2e:a0:0d:24:60:5c:6d:23:27:03:ce:34:db:bc:
         4e:79:4a:d9:a0:2c:f8:81:2e:7c:98:f0:d0:b0:67:00:f3:20:
         6c:bc:98:af:cc:26:8a:61:73:de:63:43:a0:48:22:e3:50:6d:
         89:66:8e:78:03:f9:53:28:5f:80:2a:f2:ca:1f:e9:fd:3f:cf:
         49:12:6f:73:39:9e:97:8f:a6:3d:bd:30:2f:c6:d0:29:14:59:
         a4:8e:bf:48:83:6c:83:d0:1f:25:be:56:00:eb:66:25:e1:8f:
         84:aa:38:a5:5c:4c:44:c1:a5:4a:4a:5e:89:80:a2:1a:69:98:
         78:3b:c1:fa:4a:d9:66:f8:db:0f:db:52:a3:e1:68:8f:a1:85:
         9b:17:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:20 2025 by rpki-client