Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/836e0045-44f4-32dc-bca3-65fbf931c29c.roa
File:                     836e0045-44f4-32dc-bca3-65fbf931c29c.roa (raw, json)
Hash identifier:          CB4SR08AhrpjZ7eqLKrSQnQobMxXT9rENOQVRVB2Ut0=
Subject key identifier:   3D:50:6F:25:10:1C:2B:B5:3D:BA:E9:14:22:82:BC:64:D6:79:A1:7F
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F4328584BA39D256139CA4BFDD169B280
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/836e0045-44f4-32dc-bca3-65fbf931c29c.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     201542
IP address blocks:        134.199.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:25:61:39:ca:4b:fd:d1:69:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=a897cb8b-6a24-49f9-b3ba-4794ea835be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:a2:dd:6c:47:88:b2:10:a7:03:71:f9:40:
                    62:05:e4:31:6b:ec:44:ad:d6:9e:b0:c4:fa:f1:8b:
                    cb:0d:e9:5b:eb:6c:9a:b0:bf:22:b0:af:9a:74:e5:
                    7f:76:93:31:33:27:92:fb:b1:c7:e1:49:57:b4:b9:
                    31:f0:8c:9c:ff:15:bb:e0:05:df:b8:8c:32:cb:e4:
                    3f:2b:d7:f4:6b:56:14:ac:61:13:ad:d6:91:26:f3:
                    b8:0b:5a:62:ae:b0:0d:0b:1a:c0:87:1a:25:bf:af:
                    fe:e1:5c:5f:e9:2d:b3:76:31:62:e3:10:25:02:78:
                    56:82:f8:85:77:ae:85:13:be:5e:c9:3d:c9:ef:d8:
                    d4:5b:3b:4b:b4:bf:78:b2:e3:fb:5e:8b:a8:7c:f4:
                    07:9a:21:0a:56:23:07:7b:ad:7f:5a:a0:69:d4:29:
                    95:36:34:f4:93:75:06:d1:28:48:b6:60:f3:fa:fc:
                    e5:74:6a:80:79:90:c0:1b:2d:d5:25:41:d1:88:93:
                    3b:2b:a9:1f:31:b2:59:1d:b1:52:63:66:92:cc:4a:
                    4e:b2:54:15:09:c1:e6:9e:00:39:50:5a:af:0c:a7:
                    05:d0:ee:2e:35:4c:4a:d6:3d:8f:02:60:01:86:e5:
                    9a:79:d0:b5:00:ee:c3:5e:fa:06:60:94:d7:ed:e2:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:6F:25:10:1C:2B:B5:3D:BA:E9:14:22:82:BC:64:D6:79:A1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/836e0045-44f4-32dc-bca3-65fbf931c29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:cc:dc:61:e0:1b:99:1e:0d:5f:14:b6:fc:17:2e:4e:4c:
         31:ba:22:2f:92:9b:10:21:da:61:6e:ca:be:c9:d1:fb:76:4a:
         40:99:55:3e:c5:25:08:80:47:68:9d:4a:9b:97:85:30:c9:a5:
         2a:f4:7f:55:29:5a:c5:f1:6e:eb:f9:e8:56:40:23:7a:89:d2:
         7b:f4:7e:f9:7b:1f:37:00:47:8f:22:c3:e3:04:97:1a:6d:d4:
         98:50:1c:74:17:8a:15:c6:4a:19:2b:9a:6f:e6:52:c6:f1:15:
         16:ef:f7:4b:a9:25:b0:bc:6c:f8:eb:1e:e5:da:92:37:c9:bf:
         f2:2a:04:ac:e6:28:6b:67:e3:6c:ac:f7:8b:0a:17:0b:21:79:
         98:c3:26:cd:05:b8:2c:68:14:aa:09:c4:b6:d5:2f:be:33:f8:
         1c:8e:a0:2f:a3:8f:2e:b1:b2:52:b1:7a:95:0d:bc:74:12:4b:
         44:29:d2:c9:ee:7c:0c:64:e1:cf:6b:ef:a8:2f:34:ae:7c:f5:
         db:8c:d0:d0:ed:a2:ae:b9:e2:ed:68:e3:87:cd:5c:83:46:47:
         6c:ce:cf:ed:8b:2c:53:3f:17:37:cf:80:cc:1d:6e:b0:63:9c:
         a7:56:91:d0:ce:95:26:ef:8b:7a:81:7c:a8:b9:46:cd:97:88:
         40:53:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:14 2025 by rpki-client