Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
File:                     f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa (raw, json)
Hash identifier:          8lXB5X9RYKGov3390J7jM0+aH7dY5AVdnbyqDGJqC1g=
Subject key identifier:   4B:A9:88:E2:79:09:43:0A:7D:2B:A3:B0:48:8F:E3:26:A3:11:AE:9B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BBE403246F541B6E565649980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     2914
IP address blocks:        129.250.64.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:32:46:f5:41:b6:e5:65:64:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=3c748b86-f5e0-46a0-b20c-eac716487cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:05:78:71:f6:3b:b6:50:0f:b7:7e:b7:36:
                    f1:76:61:aa:2a:16:6d:30:2a:53:d9:91:c2:e0:3b:
                    e9:56:6e:e1:2f:ba:ec:25:12:4f:d4:61:f0:6d:cc:
                    64:43:0c:17:23:05:01:03:14:8f:ad:a3:15:9f:c4:
                    e6:01:31:8d:28:02:d2:ec:25:9f:0e:27:21:34:0c:
                    0a:c3:ea:3a:ce:dd:a8:6f:a2:e4:20:2a:6d:4f:ed:
                    64:3a:5e:45:bc:30:81:0f:c0:4c:9f:46:75:8d:53:
                    db:a7:58:8a:7c:47:3a:61:a4:5a:e7:ef:3c:b1:e6:
                    ff:01:7a:7f:bc:53:fc:26:67:43:42:b8:c0:41:a7:
                    3c:e9:e1:d6:4f:7a:ed:aa:50:9b:89:06:55:b7:07:
                    2b:af:40:11:58:65:39:10:83:d5:74:a9:ca:87:d5:
                    43:81:17:36:21:17:bc:b3:3b:e9:55:cc:18:72:a0:
                    9b:ba:da:c6:0b:84:2c:48:ef:d6:ac:35:da:b5:dd:
                    8c:a3:5d:d3:65:d3:60:60:52:cf:99:bf:e6:0c:a4:
                    3f:e6:a9:c0:e9:ab:ec:ce:d8:26:00:cd:8a:26:04:
                    f2:d1:31:30:a6:d7:bd:9c:9d:82:ca:1a:cf:d2:dc:
                    8a:9d:5f:7d:ed:1e:24:4b:7c:b7:8a:23:f7:e8:ee:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A9:88:E2:79:09:43:0A:7D:2B:A3:B0:48:8F:E3:26:A3:11:AE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:49:0d:59:2d:7f:59:66:20:b3:1d:83:30:f4:ac:ca:ab:a4:
         43:b4:91:c5:9d:72:32:19:77:03:17:49:4d:92:9b:bf:07:71:
         51:03:f3:b3:2e:45:0c:18:c2:83:01:67:0f:39:47:2d:8a:90:
         9c:17:c1:14:5b:55:31:73:21:53:ae:5e:3f:7c:cf:6c:6d:58:
         fa:9a:7c:e7:08:73:d1:57:21:9b:0a:38:c6:74:10:c1:93:ac:
         b3:61:f8:0b:2c:ff:38:67:67:51:06:9c:b0:a2:a4:5f:3c:68:
         d1:7d:d4:ea:4e:cb:dc:27:43:5b:e6:86:8c:53:f2:8f:17:65:
         06:e9:a4:02:e3:f2:bb:f8:4a:96:f2:cc:7c:85:ff:d7:a7:dc:
         c6:7c:6b:4f:74:b1:9e:51:c6:ba:df:5c:79:ff:cd:98:e7:3c:
         41:de:11:0a:65:24:bb:98:a5:d9:05:53:98:7a:f5:e3:10:50:
         7b:eb:33:2f:96:f4:ce:7b:84:cf:54:44:64:b7:43:2c:e7:ad:
         cd:ee:d7:f6:1d:b6:92:0b:07:29:c9:f8:dd:c8:8d:d0:98:4a:
         f3:fa:cc:f8:c2:eb:c1:57:da:cb:64:a4:74:b7:ca:82:79:e4:
         8f:8f:61:29:5c:9b:a4:c4:c7:23:9f:32:af:68:39:76:06:63:
         67:b0:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:22 2025 by rpki-client