Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/725043e9-032e-3910-8406-050206857f71.roa
File:                     725043e9-032e-3910-8406-050206857f71.roa (raw, json)
Hash identifier:          cnU9Ms+sixbTwqdGJWzmEso6TQEUEE45+Kx0FV5PJOU=
Subject key identifier:   92:1F:94:21:F9:E3:DC:E0:45:FF:8D:07:E2:EB:B0:2B:A9:DF:2C:84
Certificate issuer:       /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Certificate serial:       010D0C9F4328584B047C027967C04A68989DD980
Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/725043e9-032e-3910-8406-050206857f71.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     56647
IP address blocks:        142.54.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:02:79:67:c0:4a:68:98:9d:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=802fc91e-df37-4507-ab03-c02956cb365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:2a:8c:e8:39:08:2e:b4:89:08:bc:66:b5:
                    7a:4a:8b:0b:4d:3c:7d:d7:06:6a:a6:48:91:c5:7c:
                    d3:6a:91:de:34:56:02:a7:b9:35:76:a3:fd:b2:97:
                    8d:a1:fe:5a:36:ca:3f:67:00:25:f5:82:03:d5:0b:
                    57:8a:fa:08:df:12:31:6e:3a:49:2d:73:4d:ef:8a:
                    4b:b9:e9:32:52:9a:5f:62:0c:d0:c5:d4:35:18:ef:
                    ea:88:d1:97:c9:9d:fc:91:02:8f:0f:36:45:e2:cf:
                    1d:83:85:88:ff:73:66:14:30:56:0c:59:bb:be:97:
                    f2:24:a2:2a:a6:7f:6a:8c:d3:2f:a7:1b:43:7f:c2:
                    1a:8e:4e:34:e1:af:fe:9e:09:2b:88:06:a4:c8:a0:
                    b5:60:b5:56:02:a8:d3:95:0f:ab:d0:be:1c:7d:0a:
                    c6:79:90:60:79:3c:35:a0:56:f0:7c:99:be:b1:af:
                    2d:72:1a:c2:e0:ad:d5:f8:bd:6a:00:92:e0:2c:d2:
                    4b:8f:5c:d8:fb:b8:fb:67:82:e8:50:18:e5:f7:e6:
                    f0:9d:3d:7f:63:01:1f:ae:e3:c1:2c:5c:1e:f8:aa:
                    1a:5f:a4:f0:be:3c:63:06:e6:27:45:55:be:1b:7f:
                    33:dc:b1:83:01:15:07:31:8b:53:25:06:b2:4f:4a:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:94:21:F9:E3:DC:E0:45:FF:8D:07:E2:EB:B0:2B:A9:DF:2C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/725043e9-032e-3910-8406-050206857f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl

            X509v3 Authority Key Identifier:
                keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:56:b4:f4:65:22:ac:cb:b2:18:4f:da:c6:ae:01:da:9d:5f:
         17:3d:24:ac:eb:fa:0f:94:56:84:96:b1:9e:ae:bd:c1:1c:b0:
         ed:06:c4:69:83:0c:c5:7e:b9:3c:49:99:18:67:11:a0:43:20:
         b8:93:32:b6:3e:8e:d0:9c:dc:31:a9:e1:70:15:b2:97:c3:c3:
         8f:25:66:8f:1d:c6:01:db:92:5d:c0:09:3d:10:89:0e:d2:59:
         97:2e:75:84:8c:b8:a4:9c:52:50:85:a0:1b:2e:c6:a2:f9:2c:
         8a:f3:41:87:03:90:c3:3d:9d:df:9a:fa:72:a8:c9:8d:11:7d:
         60:2b:d1:8f:b8:c2:b0:33:eb:84:93:ca:fc:d4:27:75:34:84:
         75:05:16:fa:a5:13:c6:aa:86:b9:9a:52:37:be:64:fa:e0:5c:
         a9:44:80:26:b9:c4:5a:a7:7e:41:1d:35:55:2c:10:cf:33:48:
         5e:ed:d8:f2:e2:e9:b3:94:31:d9:db:3f:b7:14:c9:02:e4:dc:
         82:a9:c4:29:7c:74:57:1d:c1:02:e7:ba:4a:d8:ab:b4:d6:f1:
         b3:97:e1:08:b7:8b:b6:67:c0:03:0d:d2:b2:93:4b:01:52:c3:
         4c:c6:62:0c:e0:1b:63:e0:7c:d3:9f:cc:73:61:f7:2c:51:5f:
         d7:87:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 10:52:19 2025 by rpki-client