Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa
File:                     dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa (raw, json)
Hash identifier:          F/3NTG208mVXoz0tOH9c4z8J+lFWDUkLEFfMkCpIiho=
Subject key identifier:   2C:55:CE:A4:21:0C:AC:6F:F3:E1:5D:EF:38:B4:3D:F6:45:75:F4:87
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D01E73EB9E7E9EBBCF280
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        170.85.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:01:e7:3e:b9:e7:e9:eb:bc:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=dfcf9616-f642-4e7a-b14f-d37f8eeb42f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:a9:66:69:67:fc:f5:ff:f2:74:3c:e7:82:
                    ec:0d:70:35:9b:91:93:dd:34:ad:3c:b8:88:c8:88:
                    2f:77:84:17:2d:f3:f4:82:61:f9:a4:a8:60:c0:67:
                    0f:76:3e:48:86:f8:97:9c:cc:f0:97:49:c6:c2:77:
                    1c:b7:eb:be:0a:01:5c:0c:97:34:48:1d:36:ec:1f:
                    06:7e:ab:df:60:e2:18:06:19:c3:7a:97:fa:6d:30:
                    ac:3c:c5:dc:80:50:8a:58:cb:18:2c:31:0b:87:71:
                    38:d8:ce:f2:56:e9:7d:9f:9b:02:ca:95:aa:3a:5a:
                    c5:48:ce:eb:11:3c:81:fe:41:77:e1:03:9d:03:cd:
                    56:01:75:49:4c:14:b8:28:23:f6:46:0b:e9:38:7f:
                    7c:d3:51:1f:0f:e2:00:f3:ab:15:50:f5:73:ce:0e:
                    c9:c8:5e:5f:84:16:4c:96:2f:bb:d6:da:7d:ef:af:
                    a6:f9:6f:16:7f:bd:a7:23:4e:4d:da:bd:d8:2a:a6:
                    9a:07:29:f3:e6:b1:44:7b:a0:24:2c:de:6d:d4:89:
                    cb:b2:8c:27:de:fa:ee:a9:b1:d9:60:db:f7:75:7c:
                    fd:84:5f:e6:7a:5b:81:66:e1:48:a4:2f:f0:0d:a9:
                    e8:a9:18:c2:c3:9d:b4:1d:ce:50:c7:0e:fe:22:23:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:CE:A4:21:0C:AC:6F:F3:E1:5D:EF:38:B4:3D:F6:45:75:F4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:e5:99:1b:3c:44:d2:0c:2f:a0:36:12:04:9b:0d:5e:51:
         0c:16:15:59:a3:aa:d6:61:e9:77:b3:d2:07:71:4a:2d:a5:59:
         81:e2:be:34:51:f0:25:4f:93:2d:34:74:1a:20:98:81:24:f1:
         73:96:32:84:5b:f1:af:64:b8:55:8f:c2:4d:56:47:4a:a9:ce:
         ea:5e:04:97:17:33:2e:82:30:0f:07:fc:ad:76:4b:2c:95:3f:
         28:a8:c9:a7:41:82:0e:cf:1e:ee:38:1d:5f:fe:54:05:d8:10:
         b8:e7:4b:42:c4:df:fc:3f:4e:3c:1b:db:28:ee:4d:4f:a4:ee:
         b4:ca:2c:48:de:a2:b3:38:e0:80:d7:95:16:06:7e:6c:11:22:
         f5:f9:89:5c:9e:52:9f:ee:0e:b1:cc:6f:93:d4:e6:42:19:94:
         07:12:4f:24:47:a1:8c:dc:80:5c:35:4f:c9:74:6f:d0:9c:c6:
         1c:e1:d7:ba:f6:5d:ad:db:f4:ce:00:12:b5:11:22:a3:fa:f5:
         18:2f:d7:19:64:9c:d2:0c:a7:80:16:95:6e:c7:2a:83:90:df:
         a2:43:25:f9:75:5e:0e:8c:a5:5c:1e:c1:7a:4d:06:a4:99:ca:
         59:b7:95:56:12:0b:79:80:e3:37:2b:03:fb:ea:75:8c:77:48:
         3b:be:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:23 2025 by rpki-client