Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa
File:                     a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa (raw, json)
Hash identifier:          l7mnjCEkkqGiST8hdlR/afWuAr3UwaeasoBLj93RPvU=
Subject key identifier:   9F:86:3E:1D:A9:3D:88:6A:5F:DC:AE:BD:FC:A3:57:A0:EE:D0:F2:8C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D7979913715C24DAACA920
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     33321
IP address blocks:        128.177.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:97:99:13:71:5c:24:da:ac:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=828ad176-f771-4651-8ff8-7ee53b63238e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:34:ed:bf:a9:9f:fe:70:30:dc:4d:f1:3c:
                    57:77:62:be:8c:df:3f:3e:df:ce:de:6b:4e:f7:69:
                    5e:83:db:1e:f0:f9:da:c4:61:09:1a:de:88:69:5c:
                    10:de:0b:d8:56:84:55:df:aa:23:8e:cf:c2:2d:0d:
                    67:4d:4b:67:cb:47:6c:67:48:f4:fb:2e:c1:ae:53:
                    44:66:b4:4a:da:b8:c3:7d:ea:96:dd:fd:09:0b:5a:
                    cf:8e:53:e6:f0:62:81:90:7a:9d:bc:a1:38:fc:2b:
                    3e:88:cd:b0:2b:29:d4:bb:03:1a:68:3d:38:b8:6e:
                    fd:1d:11:24:06:14:dd:5a:ba:c0:f4:8c:62:d1:be:
                    34:32:98:8f:61:57:35:c9:04:3c:38:b5:69:68:6e:
                    5c:6f:2d:37:75:d4:5e:9e:8d:30:94:1d:7b:30:b1:
                    a8:9f:0e:31:a0:e6:3d:f7:30:ef:67:2d:6f:ab:b8:
                    86:12:a2:b0:41:f3:2e:c1:f5:7d:61:98:bf:32:fd:
                    92:75:14:89:51:13:2c:57:15:1e:0a:6d:87:58:5a:
                    c2:85:f3:84:6b:1a:37:14:31:0e:65:33:24:ce:5e:
                    11:ec:6a:32:7e:09:76:e8:41:e5:0e:2c:81:a0:e2:
                    80:42:f1:e5:e0:4c:77:2a:b6:1c:bb:c2:27:5c:91:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:3E:1D:A9:3D:88:6A:5F:DC:AE:BD:FC:A3:57:A0:EE:D0:F2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a8574d5a-8a4b-3407-a8a5-1bf411cb428b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:39:15:78:c9:6b:f3:c0:6d:21:ec:6f:02:c7:54:93:00:
         d5:0c:71:2e:0e:ce:e9:cf:51:72:57:5f:5d:cd:89:4a:5b:16:
         df:ec:cb:51:8b:71:ba:90:15:3c:35:34:be:f4:65:22:3e:b8:
         34:60:04:da:d1:32:ae:9a:fe:e1:dd:d9:63:93:cd:c9:c0:8b:
         71:dc:b9:07:a8:64:fd:87:41:5d:34:1b:0b:2a:4b:88:3d:29:
         2c:64:be:7a:12:4b:47:92:0f:35:72:86:61:27:54:3a:d4:a5:
         ab:60:bb:cb:c5:c5:93:a4:7f:3c:32:39:6f:19:32:a6:88:cc:
         8b:6b:07:b4:fc:d4:c9:3e:63:21:e9:b1:c3:91:3b:39:87:c1:
         1d:f6:60:6e:74:15:56:56:71:c7:a7:e8:72:14:e0:0e:b5:b1:
         a3:4e:85:36:42:46:b6:eb:96:80:54:81:e3:bf:57:7b:68:ee:
         14:fe:50:81:f5:e5:5c:5e:e1:5a:5b:47:19:0a:fe:20:d0:19:
         b9:15:8f:44:3c:65:e3:5c:fe:4c:c7:a3:4f:ba:81:33:77:4e:
         18:cf:5e:da:46:7b:c4:69:11:f8:5b:96:9a:b1:35:90:de:ae:
         29:f4:79:c3:e3:e0:f1:a5:a0:11:4b:80:5b:a7:b6:47:bc:76:
         4f:a0:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:40 2025 by rpki-client