Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa
File:                     14101aa2-6fde-3978-964f-46e75495d447.roa (raw, json)
Hash identifier:          WwOjrAI62khq82Q/d72FAfwcvIOiTXYEUBDhqQX8qos=
Subject key identifier:   7E:1C:BB:51:F8:D2:87:15:5E:81:B4:E6:50:B3:73:CE:7E:B0:52:D6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB02D05E600CBAF05D6F3A300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        131.125.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:05:e6:00:cb:af:05:d6:f3:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=963dea32-6622-4f52-81a2-fe74fce5f475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:81:c9:c5:93:02:03:83:d1:26:7b:10:16:
                    48:82:96:68:e3:6a:0d:7c:dc:e3:a7:68:88:43:d5:
                    45:78:79:47:fa:1d:f6:3f:48:99:7b:22:0d:1b:7f:
                    b7:bd:6d:f0:57:64:2d:b2:cd:0e:d4:62:68:7c:42:
                    55:95:22:e4:8f:c0:a1:6f:24:99:f1:4a:12:38:7f:
                    5e:9f:28:47:e7:a5:34:fe:59:cb:dd:e0:63:7b:2e:
                    41:8a:c0:9c:22:14:2c:b3:f8:7c:cd:51:92:76:5b:
                    30:52:b3:dc:01:72:60:ab:42:0b:8f:da:17:35:c6:
                    3f:b9:88:81:e0:ee:66:e6:f0:4b:2d:e6:5b:0f:ff:
                    e0:d7:10:4f:84:d2:1d:ab:0c:fc:f5:ef:20:ee:b7:
                    31:a3:45:76:eb:73:bb:78:e8:9e:98:2f:47:ed:b8:
                    61:25:79:bb:cf:11:01:c2:0f:32:51:b5:84:ec:cf:
                    e5:43:c7:74:a7:86:7c:1b:fc:b0:25:99:23:09:14:
                    24:01:c6:62:aa:3c:99:0b:0e:da:a5:2b:7a:22:91:
                    bd:f3:d9:85:56:a4:9c:ab:db:45:17:e2:aa:65:d8:
                    e2:c4:77:fd:b5:15:6f:04:f5:8b:e6:b2:9b:66:b7:
                    e1:d7:81:69:9c:a5:c3:25:3b:d5:e4:2f:b6:94:1c:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:BB:51:F8:D2:87:15:5E:81:B4:E6:50:B3:73:CE:7E:B0:52:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:b5:d9:bb:c6:96:70:c9:d8:cb:2c:ee:ef:f2:0c:e8:11:
         1d:70:7e:8f:84:35:c8:5c:4e:b7:e5:d2:bf:b0:99:c8:53:ca:
         a5:29:76:fa:99:55:07:33:de:18:ac:df:64:18:03:75:43:71:
         73:db:1b:70:60:19:07:d0:30:d1:19:68:aa:81:b4:32:74:4f:
         79:d5:69:0f:95:78:12:4c:ed:4b:06:3f:db:e7:f3:ba:77:fb:
         60:ad:2a:61:f6:d1:77:53:d8:ab:2a:a6:1b:f4:7f:1d:59:c6:
         cd:f9:60:6d:c4:3e:1a:37:14:6b:a6:9f:24:d3:df:5c:21:1f:
         79:41:03:1d:a5:1b:9a:f9:e4:b8:d1:a4:c0:d4:fd:28:5a:4f:
         61:01:05:ac:29:94:e7:06:ee:52:4b:ab:39:49:c9:bd:0f:42:
         54:9e:47:24:a2:b3:79:e2:45:89:78:84:13:e2:2e:7c:51:41:
         7b:ca:e9:4e:fa:d2:99:55:4f:64:a8:9a:d8:fc:23:b6:39:cc:
         a4:8b:a8:3f:89:4c:12:6e:76:39:c6:27:41:d7:74:d7:61:6d:
         b4:6b:c6:23:33:0f:f1:7f:5e:b1:8e:d4:9f:5e:9b:03:97:96:
         88:56:73:f7:42:c0:8a:c9:e4:50:78:6a:bc:2d:c2:97:ad:a9:
         cb:85:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:25 2025 by rpki-client