Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9e0e710a-3f1e-3cfd-a862-5d4461c94183.roa
File:                     9e0e710a-3f1e-3cfd-a862-5d4461c94183.roa (raw, json)
Hash identifier:          5D0IYp94IKYas5mJTfCUjEin8NLjy4ZijGrOGHWTKGQ=
Subject key identifier:   D3:86:16:50:CF:51:E2:EB:31:B1:00:19:5B:74:D3:59:52:3B:04:56
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584B9C00A4FB427ED9456F3CECC0
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9e0e710a-3f1e-3cfd-a862-5d4461c94183.roa
Signing time:             Wed 22 Oct 2025 19:35:06 +0000
ROA not before:           Wed 22 Oct 2025 19:35:06 +0000
ROA not after:            Tue 20 Jan 2026 20:35:06 +0000
asID:                     53928
IP address blocks:        159.48.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:00:a4:fb:42:7e:d9:45:6f:3c:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 22 19:35:06 2025 GMT
            Not After : Jan 20 20:35:06 2026 GMT
        Subject: CN=b7221eed-8644-4eec-b6b1-661178f25e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:19:f9:11:e1:0f:bb:25:28:8e:59:35:45:
                    ba:fe:9c:73:d2:76:bf:50:27:38:69:0e:d6:29:3d:
                    58:d4:2a:7b:4f:bf:37:4f:55:8b:a8:9b:08:24:5d:
                    4c:58:e6:cf:10:38:ac:a1:67:9a:7a:5c:93:fb:7b:
                    86:4f:ec:4c:5d:63:fd:c7:53:63:a6:e2:2d:28:38:
                    64:c1:f4:f4:ac:33:ac:c2:5d:90:02:fc:71:b1:f4:
                    b0:8e:9a:80:d8:79:83:1c:2f:e5:16:8c:8b:cf:01:
                    1c:d4:01:e8:d6:23:36:70:17:f5:cf:11:27:34:2b:
                    d4:b3:80:c1:2e:f4:20:91:66:b7:fd:20:b5:50:c5:
                    0f:a2:74:b8:7e:48:52:14:3c:e8:d8:01:e5:73:95:
                    34:61:88:20:05:e5:ba:1a:ec:f5:4a:36:31:38:7c:
                    61:c1:9c:f0:3a:5d:1a:6a:41:ee:89:90:ec:6a:9a:
                    4a:c9:23:59:8a:73:76:de:0a:b1:2b:ef:45:53:c0:
                    c0:ca:0b:6e:89:dc:bb:82:0c:56:9e:1c:9b:15:5b:
                    a0:00:02:5a:e8:12:5e:1a:20:a9:09:d2:05:dd:45:
                    51:50:fe:8e:9a:64:05:11:93:88:96:60:bd:5e:e4:
                    7e:79:75:a3:07:c0:16:33:cf:f7:cf:bc:ee:66:54:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:16:50:CF:51:E2:EB:31:B1:00:19:5B:74:D3:59:52:3B:04:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9e0e710a-3f1e-3cfd-a862-5d4461c94183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.48.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:01:e9:e6:97:c2:6f:96:ca:f3:53:12:cc:40:1e:e1:58:
         72:52:69:b3:55:b4:64:31:a7:4d:c2:74:28:e4:70:4e:50:c7:
         02:6a:fe:4f:f9:b1:2c:ab:bf:ac:57:37:6a:a1:00:49:f1:66:
         5a:2e:8a:26:c1:60:45:1f:52:77:ba:a3:35:64:1e:03:67:8d:
         35:54:24:c7:66:70:7e:1b:75:96:5a:aa:0e:a9:19:4d:0e:d4:
         48:75:36:5a:42:7d:e5:b9:b8:99:be:11:12:ec:88:cf:45:d9:
         a6:d3:07:38:4c:e0:ae:4c:23:dc:13:1d:02:bc:1f:90:68:d0:
         a0:27:02:c8:e8:fa:18:24:a4:39:b1:bc:77:db:99:bb:08:96:
         03:ae:7e:21:5b:50:4a:27:93:bf:84:e7:dc:49:71:25:11:d6:
         99:41:0b:3b:58:a1:d3:bd:09:a4:03:e6:77:fd:ea:6e:71:4c:
         15:d0:3d:78:ef:ee:54:ee:fd:fb:27:68:7e:c7:da:6d:2e:04:
         a9:48:45:47:7f:1c:6b:ee:7b:30:91:f6:8e:26:66:3c:86:94:
         bf:d0:a6:21:c1:7b:44:ae:a4:b4:54:32:b6:ce:f3:3c:57:eb:
         75:e3:89:a2:54:ea:bd:0a:df:f3:86:ed:7a:fa:1e:5c:01:8b:
         a7:03:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:06:06 2025 by rpki-client