Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa
File:                     290a3fd8-729f-3345-afb3-8ad7258b7193.roa (raw, json)
Hash identifier:          IVobD43jf8tEBibMvK87UX2vulhUc+PYr4JlH4F85+M=
Subject key identifier:   F0:7E:D8:A7:C8:07:FB:64:10:41:70:F6:44:D6:4B:34:57:A0:E4:CD
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584BABFD3C127FAE7F90D4B26C40
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     401879
IP address blocks:        216.180.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:3c:12:7f:ae:7f:90:d4:b2:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=fb904559-41ac-45da-9f5e-4add18e4c754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:26:e5:5c:4c:d3:9b:b6:9f:26:df:a7:fb:
                    44:4b:e7:52:76:92:d4:7e:4c:3e:98:6a:e0:79:68:
                    a0:57:43:04:18:42:8c:95:04:e8:a2:b9:a2:95:61:
                    f7:da:2c:7e:95:e3:70:34:6f:47:20:50:88:08:00:
                    07:57:eb:ce:23:28:ef:38:13:74:42:68:ef:a2:96:
                    81:56:72:10:2c:d1:0e:de:9a:24:98:6f:6d:fc:3b:
                    89:ce:5f:2a:94:18:54:8c:84:fc:2b:c7:c8:6b:bd:
                    d3:ae:aa:e2:aa:3b:04:1e:f0:f9:26:e6:a4:51:cd:
                    cb:c2:bc:7d:09:e1:0b:02:a4:ff:15:79:a0:0a:61:
                    51:d1:6e:e7:e7:d1:09:4b:2f:52:eb:dd:c5:70:e0:
                    82:17:a8:f7:6e:06:80:8b:85:87:44:f0:32:61:85:
                    f2:e5:0d:25:65:b8:61:73:2b:fa:60:fa:ec:14:09:
                    39:16:af:2b:df:4d:69:7d:3a:1e:ed:49:75:ee:9f:
                    d2:0c:18:9a:84:e3:a2:92:28:b8:13:e4:b8:31:11:
                    56:4b:9f:71:9d:43:ac:59:0c:83:d0:36:10:69:48:
                    0f:db:e3:6e:cd:a4:04:38:0b:ec:c9:f3:64:d0:d5:
                    67:b1:36:d5:ef:9c:7a:ad:31:00:f9:bf:3d:30:58:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7E:D8:A7:C8:07:FB:64:10:41:70:F6:44:D6:4B:34:57:A0:E4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:e8:8d:26:56:b2:be:ba:e1:c0:db:55:46:6b:61:d5:f2:
         e4:06:72:59:37:14:a2:60:0b:79:90:95:89:1d:15:95:99:4d:
         05:df:45:a6:59:61:55:04:1b:69:48:eb:2e:ef:e1:80:17:31:
         a2:4b:65:87:d6:5f:72:d7:e5:48:ee:5c:11:1d:25:88:2e:16:
         8d:25:02:48:b8:ed:52:21:a4:43:7d:14:55:a0:8d:2b:c5:23:
         d3:d2:df:ec:6b:d0:29:ad:63:18:db:0c:0d:4b:7d:f6:7d:cd:
         68:88:a6:3d:5f:1f:33:a3:fb:3a:ba:cd:5f:ee:fe:bb:9a:fa:
         db:1d:89:98:d4:80:3a:47:01:88:85:7f:ae:78:75:79:cd:31:
         c5:af:ff:a7:07:15:d7:44:e2:6d:41:a6:63:d2:77:fe:05:a1:
         ff:b8:76:21:74:8f:fc:6d:b8:de:16:e2:f2:1c:45:b6:03:ec:
         94:b3:50:01:98:ee:58:7d:d0:b4:d9:e9:9b:4a:6a:75:b6:e8:
         7d:6d:0f:81:e7:0b:c3:2f:25:2b:80:ed:57:e2:83:fb:ef:12:
         3d:fb:2f:aa:56:b5:a2:e2:af:78:39:78:c2:4d:fc:49:db:b8:
         fe:f3:c7:bf:f7:42:62:41:8e:74:5d:49:cf:66:ca:36:a0:e8:
         11:76:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:25 2025 by rpki-client