Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
File:                     ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa (raw, json)
Hash identifier:          uDX1LZOxRy7JSie3pVxFSpYkCERKyncNeNm06kS7eQU=
Subject key identifier:   3C:DA:BC:8C:25:64:3E:A0:AD:50:CE:F0:CC:0F:F0:7B:D0:50:94:B7
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584BBFA5A262F3BE10FFDB0C6130
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     174
IP address blocks:        65.160.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a2:62:f3:be:10:ff:db:0c:61:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=068a2185-17dd-4080-a30b-82439ba77526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b8:13:96:7a:e2:54:8e:79:36:b8:72:42:99:
                    73:82:4a:3a:79:7a:c5:a0:3c:e7:ba:46:9f:94:f2:
                    b6:0f:40:09:b0:5e:fa:43:0b:c4:f0:bb:fc:7d:d2:
                    08:4e:6e:c1:3c:a0:52:fc:4c:4a:90:bc:af:81:ea:
                    21:0f:dd:c7:43:82:04:79:c7:96:81:77:a7:4d:99:
                    c3:a0:03:ac:29:6a:49:f7:aa:1b:8d:07:5b:df:93:
                    bd:6d:55:de:0c:90:f3:53:4a:90:38:48:e9:8c:34:
                    03:cb:72:8c:2b:e0:96:8f:ff:16:c8:70:0f:a1:ff:
                    48:da:dd:9a:81:38:45:44:db:ad:5a:59:29:58:c6:
                    6a:d6:f3:f7:fc:ed:ab:dc:18:7b:5c:c5:50:b9:a5:
                    3a:b8:09:3f:30:b5:18:48:5b:49:20:3c:90:09:b0:
                    59:16:68:fc:a7:a0:0d:36:c1:14:e8:3e:b5:b5:b8:
                    9f:af:22:57:71:bd:65:06:d7:06:9d:f5:c3:0e:b8:
                    3a:ed:b9:56:eb:d0:c3:e0:fc:c5:51:c9:01:e7:b8:
                    7b:70:95:78:b9:1c:a7:99:ce:32:2a:2a:e0:83:73:
                    41:86:4c:99:a8:2e:15:f8:e7:82:6e:f1:67:61:bb:
                    32:45:85:60:88:58:a1:2d:1a:a5:5a:c9:d9:73:af:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DA:BC:8C:25:64:3E:A0:AD:50:CE:F0:CC:0F:F0:7B:D0:50:94:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:49:59:53:dd:06:c6:d4:c1:5f:32:fd:24:14:8f:27:96:1a:
         86:ae:69:41:66:45:fe:65:d9:09:1c:33:9d:c7:d9:1b:b3:c1:
         d8:df:75:7f:1a:03:41:f7:be:e0:92:d6:97:6d:98:e6:17:d8:
         69:84:8e:b3:59:73:e4:22:2b:7d:4a:a1:1f:93:d6:f1:9f:81:
         b0:c5:23:0f:4f:f3:05:e2:bf:4b:e6:74:78:db:02:f6:30:c2:
         dc:3b:b6:83:3f:8f:53:69:53:0c:9c:5d:35:c8:e7:d6:e3:ef:
         bd:d6:4e:a9:52:ae:a0:34:36:e5:42:7f:c7:cb:9b:c7:f8:37:
         ba:bc:32:56:0c:a7:c8:50:b9:07:90:0d:ed:4b:55:b7:65:c9:
         22:40:e5:93:57:01:e3:9a:e9:f9:a0:84:fa:19:76:dc:9f:2f:
         85:1e:7f:36:42:a4:13:f4:c7:61:27:16:84:06:91:d6:7b:c2:
         e6:ea:c4:7f:f4:a9:f7:c1:ba:78:15:c8:73:d8:ed:99:47:ae:
         4d:c2:e0:bd:89:57:ad:2b:7c:6e:12:f2:ec:ec:aa:62:ea:c3:
         a5:0e:ba:2e:0b:50:61:bc:87:3d:c6:d3:1b:a6:3f:1d:85:90:
         4c:41:6f:36:53:27:ad:1b:bd:25:de:29:2b:44:7a:c6:b8:4b:
         b4:03:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:18 2025 by rpki-client