Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
File:                     d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa (raw, json)
Hash identifier:          tWSKH6vsw5jPxUKkikc4hVpuVOk/hYOokCUR954XPao=
Subject key identifier:   21:30:3C:94:0F:AB:35:22:22:85:1D:8D:7C:C7:44:D1:EA:03:11:FB
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584B33F19B038B48D3F33C1CAB80
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        198.176.124.0/24 maxlen: 24
                          198.176.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9b:03:8b:48:d3:f3:3c:1c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=5ce7f3d9-b99c-497d-8dd6-28b3346b1e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:ee:f0:f9:5f:7c:b6:59:8e:75:99:88:8a:
                    df:7b:30:14:dc:93:72:fb:a1:f7:24:8d:38:ac:02:
                    55:e0:41:41:6e:8d:67:0e:d6:d0:9f:4e:70:19:7a:
                    2e:92:7d:fe:2e:86:d2:a5:2f:72:04:95:2c:dd:83:
                    e9:19:2f:33:a5:a4:03:d7:c4:94:a4:77:81:44:e2:
                    7e:0d:13:15:7e:0f:f9:b8:38:29:a8:66:c7:6c:5e:
                    3b:bb:8b:41:15:d3:8c:c6:34:b7:43:fc:0a:21:0c:
                    71:97:5d:df:8a:0e:3c:68:17:15:82:c3:6e:e5:73:
                    de:b7:98:d8:55:e9:17:0f:86:23:b3:6d:c0:af:88:
                    bb:b1:3e:68:1d:9a:76:94:21:3b:f3:92:7b:18:3e:
                    6e:80:6e:85:1a:2c:a1:b8:7d:d5:00:0e:9c:a5:6b:
                    9e:9a:b2:e8:78:78:52:66:dc:fa:0a:6c:1a:76:64:
                    b4:67:fc:c0:df:f2:ab:c5:1e:0b:5e:2e:d2:05:2b:
                    f3:21:0e:ca:45:0e:f6:cd:3c:1f:01:36:96:dc:c0:
                    69:43:bf:1b:d2:d6:c7:54:75:fc:cf:28:4a:2b:6e:
                    3b:23:25:80:42:7c:5e:6d:b8:b6:33:23:8a:5f:3c:
                    2c:81:ef:02:2b:37:df:5f:f9:7d:0b:02:3a:dd:c2:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:3C:94:0F:AB:35:22:22:85:1D:8D:7C:C7:44:D1:EA:03:11:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:4d:13:4b:73:6e:d7:81:99:15:32:dc:0d:bd:13:f2:11:
         ce:0e:5e:af:82:8c:a5:b1:3d:68:42:dd:fe:cb:41:fb:b4:ae:
         c6:a1:a9:40:53:c6:b8:09:c6:cb:bd:f4:4b:52:ae:69:84:a4:
         98:24:7b:2f:e7:eb:f8:79:e5:1e:09:20:b5:16:db:a8:6b:41:
         00:07:6f:00:6b:74:74:73:b2:f2:15:98:74:17:37:5b:fa:8d:
         94:55:bf:58:0f:f6:cd:8a:8b:94:39:ed:70:81:f0:36:ae:46:
         97:cb:2b:53:f7:aa:49:5e:3f:56:8e:81:1b:dc:c2:22:d9:9d:
         a2:6c:62:ab:c5:a9:25:85:de:dd:e4:8f:8d:3a:03:a6:9b:8f:
         fd:63:10:9f:f7:9e:a9:30:fd:01:e9:18:4c:ae:c1:f1:3f:a0:
         6c:0b:cf:b4:67:0d:1d:21:a7:0c:92:c8:d3:0c:e4:e9:b7:07:
         12:cd:02:f2:e4:6d:b3:f1:55:9f:d1:3f:55:cb:7a:e6:60:5f:
         0b:b2:b5:79:36:fd:c7:d3:24:7a:41:23:c4:4c:7d:85:ac:ed:
         9e:4e:65:b1:97:1e:79:2e:f4:2a:99:c7:28:78:ec:df:47:2f:
         e8:9b:2b:a0:d6:a6:1e:ab:d9:c7:9f:52:76:ee:2a:4a:88:9d:
         f6:6e:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:19 2025 by rpki-client