Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
File:                     0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa (raw, json)
Hash identifier:          9A5qaNa5VyAzSPqSNhDprMZHR1hX4lO931graT2DMmA=
Subject key identifier:   9A:3D:D4:3D:8F:63:E1:79:2F:95:0D:D4:EF:59:6A:56:79:27:88:B2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584BBB7596776E2063E59CC09080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     394089
IP address blocks:        66.159.192.0/19 maxlen: 24
                          130.41.252.0/24 maxlen: 24
                          134.238.0.0/16 maxlen: 24
                          165.1.128.0/19 maxlen: 24
                          165.85.96.0/19 maxlen: 24
                          208.127.128.0/18 maxlen: 24
                          208.127.192.0/21 maxlen: 24
                          208.127.208.0/20 maxlen: 24
                          208.127.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:96:77:6e:20:63:e5:9c:c0:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=4d7d7c23-0bad-4e7e-bc40-f5073924fa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:78:28:4f:2d:d7:7c:da:18:0a:48:25:ea:
                    ce:7d:60:35:04:d0:dc:ab:6a:12:5e:62:e6:db:d8:
                    5e:10:38:30:72:34:ed:9f:2b:47:fd:e4:be:2b:55:
                    e7:50:01:61:0a:db:f0:47:47:e3:5c:7f:fa:4e:60:
                    a4:b2:92:c0:45:6d:fa:14:c1:e5:23:3f:e1:cd:84:
                    8d:5c:02:b3:d2:07:89:c9:37:97:2e:d4:7c:6c:64:
                    0c:c9:62:40:b9:6b:20:fb:e5:97:34:7a:a4:6b:fc:
                    72:32:72:36:aa:c7:45:d6:cd:2c:ed:14:57:ec:5a:
                    a3:13:73:92:21:10:3c:79:cc:0b:9d:1f:58:01:72:
                    2a:d3:7f:22:d8:dc:d3:42:dc:14:ff:0d:b6:48:57:
                    35:50:65:07:19:7b:a9:8b:75:9a:fd:32:bf:da:1d:
                    28:24:c7:39:b4:89:8c:6d:4b:d7:ec:46:95:f7:ae:
                    32:83:af:f1:6b:e0:56:e5:0e:7f:7e:1d:20:67:e3:
                    a2:6d:f9:b7:70:5f:34:76:a3:d6:b6:8f:c7:74:3d:
                    71:23:c8:9b:f6:b0:b3:4e:92:85:4c:7e:b1:e7:80:
                    66:e8:54:18:69:ec:c5:97:c5:35:7c:6f:61:06:ed:
                    fa:14:5b:24:80:86:d6:2d:20:b6:0a:61:e2:a8:3a:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3D:D4:3D:8F:63:E1:79:2F:95:0D:D4:EF:59:6A:56:79:27:88:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.192.0/19
                  130.41.252.0/24
                  134.238.0.0/16
                  165.1.128.0/19
                  165.85.96.0/19
                  208.127.128.0-208.127.199.255
                  208.127.208.0/20
                  208.127.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:e8:19:58:e7:d1:dd:d7:c4:e9:65:d7:f2:b8:0d:91:e8:6c:
         5e:fd:65:03:b6:88:ae:fc:0c:98:a7:c5:30:ad:7c:e1:c5:c5:
         f1:74:38:0f:15:62:c4:c9:2f:85:2c:2f:6c:a1:ea:e0:63:3f:
         c2:2c:08:e5:92:f1:e2:f6:55:1d:71:d3:e9:d7:23:10:70:4b:
         01:f1:f8:d2:35:6d:27:4f:e2:f2:47:d1:60:50:4f:92:ab:47:
         e4:43:8f:d1:9f:90:5d:5f:97:6b:f0:44:98:a3:ac:77:6e:72:
         7b:ca:05:11:31:4f:0c:d6:08:bd:0b:0d:a9:db:85:eb:86:49:
         9d:12:c0:75:27:e4:e5:49:f5:1d:d0:51:0f:34:21:45:5b:1e:
         d2:34:e9:5a:01:b7:9b:e6:0b:67:b1:36:4a:dd:83:57:d3:f3:
         e2:3d:5d:f6:b4:87:3d:0c:8e:f3:b7:2a:5c:87:05:ec:05:5d:
         6d:13:0c:f8:0a:56:0c:8f:ce:2c:f7:e8:3e:22:ba:06:5d:51:
         dc:2d:ab:d2:43:00:84:8f:49:b0:f4:c4:00:85:6f:9d:97:5a:
         74:9b:c4:96:db:de:a9:39:05:aa:dd:00:b9:67:f2:82:5a:26:
         67:4f:10:43:f7:8b:64:15:2f:54:ea:d1:d8:ef:0d:c8:53:85:
         4b:d4:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:22:24 2025 by rpki-client