Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e142b6-86b1-32b4-8b77-a07ab82680d3.roa
File:                     d1e142b6-86b1-32b4-8b77-a07ab82680d3.roa (raw, json)
Hash identifier:          EmOyWyPfPnH/utBIyKv+AN84ZMMqlTxT0Vk2FMciyfE=
Subject key identifier:   C1:60:E3:0C:FF:9D:CA:E7:77:B9:78:F9:66:42:A4:59:51:5C:A4:6E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D02A7AF9A0C7FD369F780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e142b6-86b1-32b4-8b77-a07ab82680d3.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        170.85.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:02:a7:af:9a:0c:7f:d3:69:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=83bcc4ef-0119-446e-a526-ae6c41152a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:8e:9e:45:27:a9:b4:67:07:8c:5e:a3:66:
                    7f:58:2f:1b:66:5a:8a:ea:4b:6d:9d:df:88:20:49:
                    bb:d6:67:e7:fe:f6:a7:e7:a9:5e:ef:ff:4f:d4:5d:
                    6b:b5:5f:0d:85:22:5b:2d:66:d0:41:fc:ea:5a:27:
                    c1:52:c3:92:e4:2e:77:ab:5d:04:61:a9:8a:02:cc:
                    39:06:87:a7:4f:4d:fb:d1:2d:2d:16:d6:fb:51:ca:
                    4e:79:6f:ce:35:7d:88:05:fa:98:58:33:6e:7c:ff:
                    34:a9:42:7b:4a:c4:da:ae:85:c0:d2:32:e9:90:db:
                    d5:5a:3f:16:21:c5:3e:3f:eb:19:e4:dc:a7:cb:9d:
                    46:6c:65:53:f8:c7:02:f0:95:98:f6:51:1b:af:7e:
                    33:73:5d:33:bf:ac:f3:40:b9:85:a7:bb:4c:67:cc:
                    1c:04:cd:9e:1f:1e:59:cc:90:9c:c8:cf:fb:4d:b7:
                    71:ae:5a:71:2d:a0:8d:53:cf:dd:e3:99:87:e9:9f:
                    b3:08:2a:ab:d2:02:cd:cd:e2:07:5c:02:80:fe:ee:
                    2c:a4:4a:a6:5c:3b:01:15:57:0d:f5:d3:2b:be:bb:
                    71:6c:32:3c:b7:5b:12:5f:73:bf:c9:50:da:b6:36:
                    90:0c:06:1f:9f:ec:5c:c4:71:82:d3:d9:04:95:c2:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:E3:0C:FF:9D:CA:E7:77:B9:78:F9:66:42:A4:59:51:5C:A4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e142b6-86b1-32b4-8b77-a07ab82680d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ee:47:4b:89:97:2f:7b:1a:cb:55:b4:fe:1e:92:0d:12:5f:
         3f:76:4c:e6:ab:c6:ff:2a:e9:ae:2f:0a:6b:73:67:c5:a9:5e:
         f9:2e:05:88:5f:11:44:14:4b:b1:87:ce:6d:bb:c8:d4:eb:2b:
         b6:93:81:59:77:97:69:70:93:dc:bd:39:7d:25:53:69:b3:98:
         3d:17:04:5d:38:36:d7:b0:73:04:b4:6c:08:7f:36:cb:c2:63:
         46:9a:46:23:3e:4e:b1:d1:4e:8a:74:70:41:9e:53:0f:88:90:
         3f:18:79:eb:c9:83:af:59:e4:46:98:2a:cb:12:00:6d:56:5e:
         08:84:1b:c5:6f:73:2f:bc:42:dd:c3:80:1a:91:24:1f:57:81:
         48:d0:f0:72:96:5c:5a:f2:dd:2b:ff:5a:e7:75:12:4f:0a:c8:
         2b:51:75:0a:64:ee:29:42:f7:4a:79:c7:65:59:33:14:11:e4:
         7b:5b:39:ee:67:58:ab:34:b9:3e:6d:a5:4a:de:5b:2c:54:a2:
         c6:21:c7:cd:da:84:c6:5b:15:ac:f3:5f:3a:95:f2:19:e1:f0:
         1f:1a:93:84:9e:91:fe:b9:f2:4d:de:76:dd:d7:94:ff:23:14:
         16:dc:15:07:56:51:80:5d:0d:4b:cf:4e:9a:ce:2c:a3:6d:30:
         53:00:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:42:01 2025 by rpki-client