Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/718f2464-23e7-383c-b84a-3d8810e8e6f4.roa
File:                     718f2464-23e7-383c-b84a-3d8810e8e6f4.roa (raw, json)
Hash identifier:          7X/Xviey8tZz45LlbuwMiqlWvv/WEZupntVZftBJG2U=
Subject key identifier:   F8:D3:E5:DC:EB:F0:B0:BD:1D:0A:27:C9:E5:60:E9:DC:98:AD:54:EE
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584B9B3CE7512F1A0FB5ADDB0400
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/718f2464-23e7-383c-b84a-3d8810e8e6f4.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     63293
IP address blocks:        129.134.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e7:51:2f:1a:0f:b5:ad:db:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=dfb1b241-399d-47e3-b8a1-8d0d2715ae18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:e0:5b:6f:c6:b4:57:96:82:36:b3:93:4b:
                    e2:58:f9:75:a6:f8:ef:70:23:92:e7:0d:7e:26:7d:
                    bb:05:67:7e:3b:cf:55:b5:60:32:8a:29:22:63:8c:
                    9a:2a:b1:2f:95:97:9e:a0:da:8c:10:f3:db:8d:a9:
                    3a:c1:71:53:57:0a:6f:2f:39:20:52:39:e8:19:bf:
                    a1:f7:4e:a7:41:ba:80:a3:4d:ba:20:95:d6:a6:fb:
                    f4:b5:86:3d:44:2a:25:d5:ba:45:de:1d:2f:db:43:
                    80:cb:17:6e:0e:f0:6d:02:82:d1:15:4d:ff:e2:e1:
                    eb:f3:76:7f:c9:b6:1c:21:91:07:e7:13:7b:c3:27:
                    b2:f3:89:7b:4d:e4:89:13:0b:7c:b8:92:6f:ad:87:
                    dd:50:23:1f:c5:bb:6a:87:b9:80:1b:e7:c5:0b:57:
                    b4:81:6e:df:38:6c:24:34:45:10:e2:99:b8:0c:e5:
                    63:cd:a3:b0:ff:be:94:cb:25:83:a7:fb:bf:ff:97:
                    0c:90:a3:1e:17:b5:28:26:91:ee:0b:8f:26:9d:ed:
                    c7:ac:e7:71:3f:3c:bc:02:63:fd:b6:86:6d:f1:26:
                    0e:31:6e:ca:46:3a:25:db:0b:b7:a9:46:5e:b3:73:
                    00:14:fa:da:9f:a4:d4:1b:77:bc:cb:04:6b:9b:f3:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:E5:DC:EB:F0:B0:BD:1D:0A:27:C9:E5:60:E9:DC:98:AD:54:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/718f2464-23e7-383c-b84a-3d8810e8e6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:0a:0f:0d:68:9f:f7:f9:0a:56:ab:6c:14:8e:89:47:e6:
         a5:06:09:15:98:ac:15:f6:fc:64:97:c6:80:6a:56:6e:f9:7c:
         f7:6f:f5:80:5b:76:6d:5b:33:06:b6:dc:fe:8c:6e:cf:3b:71:
         09:88:d3:44:9a:dd:4c:55:9c:9f:5d:28:28:33:24:f3:2a:43:
         7b:48:97:cc:52:20:78:54:2b:e9:52:5b:b7:f3:29:56:8e:9f:
         39:58:ab:dc:f9:a2:e3:0d:00:22:65:8a:69:bb:1e:df:b3:ab:
         23:d5:38:72:9e:c4:6d:e9:3e:5d:cb:b1:a2:23:6e:c5:71:f2:
         70:ab:c3:46:7f:cb:9e:fc:80:24:57:d4:8c:98:71:26:74:28:
         20:2e:04:e4:a9:bc:35:9a:13:89:ed:26:91:a0:03:94:94:74:
         63:f0:30:31:d5:f6:88:f8:3d:8b:77:d0:a5:ce:7b:e8:fc:f1:
         cd:90:a8:c0:f4:09:e7:8e:ca:43:11:98:3c:6c:fb:58:8e:95:
         f6:ab:3f:ae:0a:90:a0:aa:2e:ec:f2:28:4f:3a:53:c7:2a:eb:
         ce:d1:f2:cf:af:0e:19:5a:9f:3e:a3:af:1e:d5:93:80:c9:b0:
         06:5d:4b:c0:be:b3:f1:ab:16:05:89:3a:f0:b8:b9:2d:b6:84:
         1d:c8:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:59:59 2025 by rpki-client