Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/69412ba9-0042-31e8-b6e3-ce8e9cf9d7c4.roa
File:                     69412ba9-0042-31e8-b6e3-ce8e9cf9d7c4.roa (raw, json)
Hash identifier:          NzB8VU4D7lyxlLl2yYDnwMUelZ8X25VCdnOzuuuQGL0=
Subject key identifier:   29:ED:54:A1:79:62:0B:51:B7:8B:C8:2C:72:06:C0:09:62:12:D9:71
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D7A9BE6175325905B86F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/69412ba9-0042-31e8-b6e3-ce8e9cf9d7c4.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     17025
IP address blocks:        208.184.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a9:be:61:75:32:59:05:b8:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5c825040-c413-41d9-b27a-4dd5020a6c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:97:fa:5d:db:78:5c:ba:a4:60:76:d3:33:
                    b1:d8:9d:77:99:5e:92:c7:5d:98:42:be:5a:69:8d:
                    35:c3:73:29:19:17:00:92:0d:0b:ad:b8:0e:20:d3:
                    ea:e0:94:49:6b:d8:f4:16:4e:97:ff:ad:60:71:2d:
                    c6:ea:18:5b:38:7d:9b:a2:a6:01:ef:ab:a2:29:09:
                    d9:bd:c9:02:d2:ea:11:0f:b4:5c:d3:f1:24:1d:a4:
                    89:83:b5:38:5d:ba:0e:de:92:84:b1:87:24:0c:f0:
                    d4:8f:aa:bd:8d:6e:39:18:5e:4a:bd:e8:91:ec:f4:
                    d4:b3:59:41:ad:43:64:37:74:ef:94:80:c9:86:bc:
                    e8:3c:44:73:bf:8b:77:6b:66:d8:74:16:25:9e:26:
                    2d:65:1c:8c:3c:d2:aa:5c:c7:cb:56:1b:39:c4:0d:
                    92:fd:c1:fe:d3:95:63:70:c1:c6:97:c8:75:58:52:
                    e7:2e:74:e1:26:42:ff:8e:c3:47:03:08:c2:f1:28:
                    aa:59:54:3d:d9:e7:db:01:a8:da:5b:f7:bf:7f:22:
                    f3:0b:25:ae:d8:5f:4c:86:ff:b0:e0:c7:3f:ad:2b:
                    46:d7:b0:22:52:34:07:be:5d:5e:bf:49:4c:ba:5d:
                    48:80:37:37:a4:90:68:a3:1e:49:e6:82:da:9f:99:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:ED:54:A1:79:62:0B:51:B7:8B:C8:2C:72:06:C0:09:62:12:D9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/69412ba9-0042-31e8-b6e3-ce8e9cf9d7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:47:60:74:bf:26:3a:15:3f:3b:d1:70:d3:74:6e:0a:5c:
         a1:00:11:44:6f:13:b6:b7:c3:a9:00:d9:27:39:f1:a8:3f:88:
         19:eb:be:a3:8f:81:27:fc:5d:21:29:d0:7f:8b:56:1d:9b:2c:
         2a:93:27:b3:9d:fa:e2:30:98:16:6a:54:48:49:06:18:c7:94:
         09:66:21:32:c3:7e:cc:34:59:51:f8:b6:8d:74:10:31:90:ed:
         6c:55:40:e7:40:d0:c5:5a:db:54:28:9e:20:3b:dd:fe:f6:0c:
         68:00:b0:ed:0c:f6:c6:c9:84:e0:7b:ce:f5:36:9d:eb:e8:b6:
         61:b1:76:a6:99:1d:c7:0a:b0:e7:bd:dd:32:91:bb:f1:66:8d:
         c4:38:85:81:50:e1:75:0a:3f:7b:f2:83:1a:fb:7f:23:7e:7a:
         64:7c:e5:16:36:30:6f:1a:0d:90:da:30:c2:f3:96:15:44:63:
         a4:cd:a1:96:84:59:89:68:74:74:0a:36:4b:04:21:5f:c6:a6:
         ed:75:9f:f7:ef:99:8a:82:e3:c8:f6:f6:88:3d:07:9e:3c:43:
         9b:3f:9b:bf:c9:76:67:4e:ce:38:38:52:00:d7:76:9c:70:95:
         c0:33:fe:bc:7e:9e:b7:bc:56:75:eb:e7:ce:4d:e7:34:e4:1c:
         d4:0a:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:40 2025 by rpki-client