Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
File:                     7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa (raw, json)
Hash identifier:          JSzOd+npO3IDqwQ4EtmyBdi1EdlwSU4RxsFx8f6DOLM=
Subject key identifier:   83:E8:97:78:32:0F:20:63:77:E8:82:71:B2:1E:A1:54:40:59:C9:C5
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584C5EC7263FF50C8CE276FC0300
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     32329
IP address blocks:        161.115.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c7:26:3f:f5:0c:8c:e2:76:fc:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=ebdd2149-9108-4dc2-ad35-ed6d5b7f2538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:37:5f:f0:08:1d:45:60:4e:f9:0f:d3:43:
                    2b:69:9e:12:f5:a5:42:78:18:77:58:9b:4e:f8:45:
                    8b:cc:b6:22:c4:e3:f3:fa:64:7a:74:12:81:9b:a3:
                    f6:50:45:5e:c9:70:55:b7:e5:93:cb:a1:d6:f6:a1:
                    b5:0f:90:94:62:d8:7f:c0:80:14:43:f3:c6:2d:f8:
                    ce:d1:8b:5e:1a:cc:7d:e8:d4:42:08:88:a1:dd:a6:
                    0b:fc:3f:e7:6e:5f:39:1b:37:f7:0d:af:e5:2d:0e:
                    d0:99:93:d8:ef:9a:10:9e:f6:c6:a3:57:d6:49:9b:
                    7c:63:8c:35:78:86:e4:a5:aa:56:d9:b8:0c:ed:d7:
                    0b:0b:e2:4d:52:81:bc:01:94:7c:4b:4f:a6:63:1e:
                    5f:20:8e:c2:ae:ec:19:bd:1e:96:1a:c5:69:3d:94:
                    df:cf:87:95:32:b2:04:d5:37:a9:01:79:fb:62:83:
                    03:4c:26:bb:bc:b0:a8:b9:ca:4e:3b:53:9c:3d:02:
                    9a:b5:2b:be:fa:d9:9b:14:07:f8:d1:4d:45:54:79:
                    a4:65:49:31:38:7a:0d:d3:8b:6e:5b:38:ed:8e:fe:
                    f8:4a:58:37:95:85:d6:a8:8d:8f:bd:12:e8:e2:2c:
                    ac:f7:a5:e0:e9:5d:d2:6a:bb:00:e9:b0:59:cc:0e:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:97:78:32:0F:20:63:77:E8:82:71:B2:1E:A1:54:40:59:C9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:da:e6:4b:7b:df:f3:5d:78:48:3f:74:3f:a0:82:8c:4f:
         64:c5:bd:3f:0b:e1:f0:ec:cb:3c:68:4b:40:85:18:85:6e:08:
         e6:bd:10:f2:a9:92:8f:76:02:95:fe:ae:ad:f4:dd:04:8f:8c:
         fd:02:4b:9f:7a:e5:68:ae:0a:ad:25:4a:c3:cd:97:ad:b3:e1:
         5c:5e:3e:9a:f4:e6:7b:ac:76:ed:ad:78:d7:fc:cd:2a:40:0d:
         cd:b5:8d:08:3c:1e:d9:1d:06:82:2c:f7:27:36:ab:3c:55:2e:
         30:83:36:e4:ea:f0:2b:00:28:c7:0f:68:53:13:dd:90:3c:3f:
         62:cc:41:9a:97:5e:70:a2:c2:33:f4:b2:c6:e1:f7:9b:60:b5:
         23:9f:85:84:c1:6e:c4:da:c9:86:e7:9f:39:c5:b0:65:ac:0e:
         95:c0:d0:cc:c1:f2:ec:80:c3:23:61:e0:45:58:2a:cc:ae:11:
         28:1c:d6:25:b3:89:d2:d5:2a:b9:22:d7:6e:56:d9:62:31:24:
         ba:20:72:9c:79:86:8b:66:d7:5d:16:72:24:fe:8d:a9:5d:d3:
         09:78:a4:ef:d8:ab:0a:60:13:ed:e0:a1:03:87:1f:28:61:e7:
         6e:15:95:7a:f9:c9:f2:35:fa:d9:e7:b9:0d:e7:cc:53:da:31:
         3d:0e:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:58 2026 by rpki-client