Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa
File:                     882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa (raw, json)
Hash identifier:          AatoOyFPIHZbmmxvzFA0qmQUf+X6WWzFFXeSb7xxsEU=
Subject key identifier:   13:99:E4:68:FF:18:5D:12:47:4F:33:50:4F:7D:8F:DA:7F:DA:76:F6
Certificate issuer:       /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial:       010D0C9F4328584AAB264E82566D4A29E49E51C0
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     2635
IP address blocks:        87.250.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4e:82:56:6d:4a:29:e4:9e:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=51d066c2-2707-4ebf-b290-12a2a135802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:17:f5:d4:d8:d8:23:10:19:ac:c4:c9:01:fe:
                    77:62:78:cf:ab:26:d4:a7:84:16:aa:6d:0f:01:46:
                    09:ff:49:9a:99:60:03:9b:fc:98:15:a4:c7:12:7b:
                    f0:b5:16:86:12:a3:26:e7:3e:ba:f0:85:b3:8d:14:
                    bb:34:ad:f9:00:31:27:5d:8e:d4:1e:d1:f2:cc:4a:
                    b8:3d:f2:c1:26:e0:05:60:7f:52:3a:92:cb:06:c2:
                    f4:68:11:48:21:8c:38:36:e7:e6:5b:10:84:db:d0:
                    cc:5f:bb:5d:56:c4:c3:26:68:e0:de:82:e1:1b:1b:
                    20:66:d3:3b:a6:20:ea:79:2d:01:49:17:38:85:24:
                    2f:13:32:ca:40:6b:09:a0:10:38:03:db:72:91:6a:
                    22:a2:f6:0c:90:be:f2:36:07:0b:14:7c:de:3d:af:
                    ef:5f:40:6d:d8:9b:d3:40:da:1f:10:e2:6a:ca:a8:
                    97:89:68:5d:6f:36:40:c2:89:e7:bb:7a:fe:9e:4a:
                    53:79:20:c6:81:21:47:73:0c:9d:60:96:01:83:45:
                    f0:7a:cb:9a:e8:3c:28:76:e4:3b:63:33:26:35:e9:
                    f4:bc:57:dc:57:c9:73:9f:bb:4b:8f:9f:09:7a:f6:
                    9b:33:11:3a:7d:78:d6:14:25:b7:64:e4:83:57:00:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:E4:68:FF:18:5D:12:47:4F:33:50:4F:7D:8F:DA:7F:DA:76:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl

            X509v3 Authority Key Identifier:
                keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.250.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:e8:2f:cb:b2:2b:d0:70:db:29:e7:3f:d0:f6:29:55:9a:
         b3:a0:ed:06:76:bb:39:eb:af:41:a1:4b:5f:32:c7:d6:2a:e7:
         75:3c:d5:97:ec:23:aa:27:13:32:af:13:9c:02:34:a5:42:d1:
         a2:2c:a1:43:4d:66:21:05:cc:2f:27:e7:80:dc:83:bb:f5:ba:
         e5:1c:ff:c9:01:2f:2c:e0:f8:fb:d6:56:30:be:1b:9b:90:d3:
         07:5b:ad:be:d3:af:37:a4:9e:1c:51:6c:d4:84:22:6b:81:05:
         8a:ea:2e:88:96:9b:aa:d6:98:0c:24:82:85:b5:96:a5:3f:5e:
         86:81:ca:52:e4:64:0c:ad:61:0a:79:85:7b:e0:a7:78:e3:1a:
         51:17:1e:33:76:52:66:45:b4:91:9d:a9:41:d3:c0:5f:b9:b1:
         0a:c0:b2:fe:5a:b4:3d:37:62:9f:28:e8:b0:fa:56:36:84:84:
         52:32:8d:66:2d:e1:1b:32:1a:23:d4:a7:0d:12:43:1b:6d:7a:
         7e:9e:2a:3a:59:de:b4:02:4c:fc:84:d0:88:46:86:72:68:bc:
         1a:87:dc:20:bd:17:38:15:fb:1f:9a:b6:f0:d3:36:25:97:61:
         c8:88:65:9c:6a:5b:4f:3a:b1:1a:11:4c:8d:75:c7:ed:d6:76:
         94:d6:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:46 2025 by rpki-client