Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/55e93838-88d7-34bf-ae24-015f38da5074.roa
File:                     55e93838-88d7-34bf-ae24-015f38da5074.roa (raw, json)
Hash identifier:          98qPiwhTAGEvFRy59sRXuUpNDUZv6m5IcrunzyVwGyA=
Subject key identifier:   56:B8:B1:04:CC:C5:E1:07:9D:AE:1F:3F:8C:B1:B9:97:CF:4E:28:A0
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584BA9327207D4E6B9E5B83E7D40
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/55e93838-88d7-34bf-ae24-015f38da5074.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     11693
IP address blocks:        216.130.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:72:07:d4:e6:b9:e5:b8:3e:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=ecab4dac-3b89-4f6e-aeb8-6666e77906b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:51:ac:20:45:15:b9:2f:89:6b:74:7e:17:c9:
                    a0:d1:b9:cd:c8:4d:e4:25:86:bd:dc:32:1d:46:25:
                    0a:4f:38:fe:6e:aa:6f:f9:a5:87:bf:8a:5b:d5:ec:
                    a7:d2:75:1f:c7:4f:5d:a6:a2:ed:eb:8a:b4:b2:47:
                    03:7c:6c:5c:35:93:f3:b0:fe:79:c1:ef:76:f5:8f:
                    f1:92:e4:20:70:3b:2f:99:e2:ae:12:3f:a6:47:47:
                    52:94:8d:32:b9:1d:37:a6:45:60:9e:f6:f8:81:87:
                    32:77:e0:14:ec:c1:84:d5:3b:ed:0b:a8:e1:e5:19:
                    04:c0:e5:96:5a:9f:5f:2f:7f:88:e9:f8:1a:4c:1b:
                    cf:5f:09:9a:98:cf:ab:83:11:a5:e7:55:0e:1f:28:
                    31:0f:d6:e3:30:8b:8c:a1:17:84:4b:f5:cd:bc:2c:
                    93:ec:a8:83:42:59:b4:b2:df:cf:1c:6c:fa:8a:6f:
                    b8:60:e9:15:59:07:e9:7f:65:fe:f4:33:53:a2:3a:
                    6d:89:42:9b:63:5e:71:9d:5d:5e:a7:e1:50:3d:21:
                    ea:31:ff:6a:40:e7:47:ff:27:20:27:c9:82:d4:84:
                    03:fb:79:a8:b6:b2:de:de:b8:96:c8:7e:59:5b:1c:
                    fb:a9:17:40:f3:df:e4:11:65:0a:d1:d5:59:42:f6:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:B1:04:CC:C5:E1:07:9D:AE:1F:3F:8C:B1:B9:97:CF:4E:28:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/55e93838-88d7-34bf-ae24-015f38da5074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:dd:d3:ea:75:12:c2:93:1c:af:87:60:92:0a:06:99:1c:f5:
         01:dd:36:a7:51:78:0e:df:5a:a7:76:5c:21:b2:d6:29:f7:e2:
         6c:81:90:7c:98:27:b4:5b:5e:73:2c:9e:07:2d:f9:d4:52:b1:
         de:51:26:ef:0a:21:1f:72:38:5a:c5:45:ba:50:c2:16:e5:7d:
         89:31:b1:6e:56:f9:67:22:f0:c9:c4:65:22:96:f8:07:0b:63:
         e9:15:35:71:d4:7a:10:48:80:cb:28:b9:69:ee:43:cf:1a:c3:
         9a:10:bf:2e:80:e6:0d:2e:c5:6b:20:c6:99:e4:49:1b:48:60:
         29:c0:a4:b3:a5:63:64:4c:34:4d:c4:be:dc:cd:8d:60:6f:5c:
         5b:50:29:5c:22:8c:d4:9e:d8:0a:fa:7b:dd:2a:a5:01:8e:5c:
         f9:a5:a5:1f:36:7c:80:c8:3d:78:d7:51:14:be:97:fb:d7:f8:
         6d:52:25:fb:f8:b1:5c:ab:33:1b:d2:f6:26:cc:7b:29:4b:d4:
         73:be:1c:fe:1b:42:0a:c9:21:8a:ed:14:f5:a4:19:60:ec:cd:
         19:77:c5:d2:8f:bd:da:7a:e0:e4:4b:24:71:a7:1c:2e:31:b5:
         d3:3d:92:18:a3:23:a2:a2:eb:56:21:aa:f4:a7:96:d8:7b:cd:
         a5:90:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:20 2025 by rpki-client