Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa
File:                     42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa (raw, json)
Hash identifier:          S7rXp/4Mcy7ZUvINkwlhuYsR0Fw4M8Mq9nrXg5TzK5E=
Subject key identifier:   39:2E:A8:59:4A:91:1B:7C:82:4B:09:65:35:A0:3D:78:21:62:7A:D8
Certificate issuer:       /CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
Certificate serial:       010D0C9F4328584B9E07B0E0387A62556B026B80
Authority key identifier: CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     36127
IP address blocks:        134.195.52.0/23 maxlen: 24
                          2602:805:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b0:e0:38:7a:62:55:6b:02:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=8fe3e6d8-5937-4f91-8183-28d244e0d708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:d3:d6:29:68:7f:c2:6d:17:12:cb:9c:7c:
                    2c:be:d1:5e:49:64:2e:86:cd:2b:e7:55:87:ac:24:
                    72:a7:e4:29:d9:c3:7d:60:a7:ac:6d:89:75:10:4b:
                    e1:9e:4e:f1:9a:12:2c:40:15:7e:94:68:35:ca:a9:
                    a1:dc:51:02:e5:78:20:99:74:ef:22:6a:6e:46:fd:
                    a0:95:0c:4a:06:d2:24:24:60:c1:7a:33:e5:13:8d:
                    5c:05:cb:51:de:c3:1b:e9:6c:4b:30:0c:12:45:36:
                    19:80:75:db:0a:15:a4:90:a1:e3:a3:b9:9f:89:09:
                    b9:ee:05:b6:59:5b:35:e5:a6:54:f4:ab:57:00:10:
                    b4:5c:ca:7c:36:22:4c:86:1e:c0:f0:3b:2c:b9:80:
                    64:32:46:c1:73:ce:65:05:3f:f8:e7:b8:84:1e:1a:
                    9a:77:63:74:4a:d4:db:90:69:68:49:32:43:8f:ea:
                    92:2e:51:6e:1d:21:91:1b:54:db:a9:f6:b4:dd:b1:
                    7a:ec:0d:91:aa:69:a9:7a:e2:5e:a1:05:97:93:61:
                    8e:d2:ea:77:ce:c8:d1:00:02:fe:99:99:aa:36:10:
                    8c:6d:ae:41:7a:50:de:f6:38:3c:f6:6b:0b:3d:a5:
                    cf:57:3e:65:06:7f:cd:a6:14:e5:f5:1a:fa:df:d0:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:A8:59:4A:91:1B:7C:82:4B:09:65:35:A0:3D:78:21:62:7A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.52.0/23
                IPv6:
                  2602:805:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:ec:ee:2d:1c:27:36:8a:be:b4:24:5e:f4:38:11:6f:9a:
         d1:dc:e7:f9:d3:b6:5f:f1:3d:2f:91:a0:20:88:9a:b2:f7:f4:
         13:45:87:2d:19:cf:82:a7:b2:9f:4f:9a:70:06:9e:53:a4:43:
         f5:1a:ad:18:aa:8f:16:ce:07:ec:22:f8:9d:2c:53:3b:21:6b:
         09:2c:73:d7:e4:ce:54:aa:d9:cc:e2:64:51:e7:1e:99:e1:5b:
         2e:d7:1c:4a:28:e2:ba:98:ec:5b:c1:d6:79:97:05:c6:15:c4:
         1e:18:3f:ef:16:3d:f5:c8:b5:1a:cf:f1:7b:40:a8:9f:51:77:
         56:e8:74:32:67:f7:e9:8f:ab:fb:1d:d5:3d:d4:be:21:34:ee:
         bc:ad:85:bf:33:c2:d7:8d:ba:0b:f0:8f:1d:af:1c:bc:1c:c6:
         b3:13:8c:b7:30:d7:a7:fc:de:4e:53:d3:c1:35:44:5a:e7:21:
         06:af:19:93:9a:5e:56:5e:a8:0b:24:ee:8d:a5:51:0b:9b:f0:
         97:42:03:31:a4:b4:76:18:b2:2a:3c:14:c5:ad:62:7e:0f:9f:
         5e:ad:29:38:2a:69:c2:dc:da:94:5a:88:cc:24:a3:0e:41:6f:
         89:77:68:49:a8:5d:fd:3a:84:6c:3a:e3:6a:3b:01:ec:54:5b:
         80:49:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:54 2025 by rpki-client