Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
File:                     f8f28901-c226-35c0-b637-349a0ecd0236.roa (raw, json)
Hash identifier:          uVmhQk1U4E1Mhhh2JbLKJhzz0PqaGpjzC2xEb/lq/xQ=
Subject key identifier:   49:F5:46:EB:A8:E8:4A:CE:01:9C:32:98:4F:33:E9:06:8A:A1:B5:15
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F4328584BAA97A3F9F2820721A29D25C0
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        192.122.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a3:f9:f2:82:07:21:a2:9d:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=e585365d-86e0-4ca1-9c5f-29f7ed6dcdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:e8:ba:d6:af:a7:9f:93:88:2f:da:37:89:
                    21:64:0f:5d:04:91:5e:66:b3:5d:b5:84:86:1f:89:
                    4e:70:85:95:a4:83:ab:d2:0a:41:79:de:08:9d:7b:
                    76:d5:7f:21:41:b1:c0:08:5d:a0:62:e2:e7:26:c0:
                    2c:37:ce:66:1c:2e:43:cc:04:ce:87:66:ed:df:d2:
                    5a:8c:4c:cd:c4:d0:ee:5d:f8:fd:6c:e8:46:b1:23:
                    24:c0:31:ad:7f:c5:0e:98:a2:4b:6d:e7:11:1e:6b:
                    34:e2:40:44:ac:18:37:f3:ea:9d:b3:29:91:a6:85:
                    59:b8:1b:0f:66:a9:b3:d7:f8:6e:31:25:c0:45:97:
                    e5:7b:92:ea:3e:bb:d8:45:d0:e2:62:fd:0b:c7:2b:
                    17:a5:4d:84:0d:92:37:28:66:72:b6:55:45:eb:3e:
                    0c:35:8c:b8:6f:43:4d:5a:7b:1f:c2:5c:52:7f:60:
                    8d:e9:21:dc:29:00:c1:95:53:11:2c:09:47:da:a0:
                    90:37:72:6f:b0:49:3c:bd:a2:5c:26:32:3d:98:a1:
                    0d:63:84:cf:9b:84:9a:1d:5e:c9:3a:c0:2b:48:f3:
                    de:bb:7e:4c:2e:e7:7a:f1:15:a8:bb:f0:80:a9:7e:
                    3a:e5:0a:e7:02:ad:05:8d:cd:31:75:99:31:c7:10:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:46:EB:A8:E8:4A:CE:01:9C:32:98:4F:33:E9:06:8A:A1:B5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:25:cf:4d:83:d9:92:af:fc:8b:fe:72:4f:69:49:c3:30:12:
         d4:ab:d0:40:f2:9f:1d:be:8d:37:18:ab:25:7b:b9:56:be:43:
         80:aa:02:d2:e6:b5:52:ca:db:6f:fc:85:45:28:88:02:c3:32:
         cd:03:59:59:38:ab:49:dd:b9:88:de:44:e1:36:99:98:f5:ca:
         68:a8:c1:94:eb:f5:e3:57:2e:42:0e:d8:de:e9:43:29:cb:31:
         aa:5d:0d:b2:73:a7:e3:91:f9:81:b0:3b:bd:ef:ef:12:eb:f5:
         6d:9b:6f:ae:b7:d6:98:0f:e1:d5:94:a8:73:cf:c2:77:68:e7:
         f9:02:45:5b:01:36:a0:78:cb:2a:e8:c8:32:df:b6:fe:3c:d6:
         57:0d:dc:f8:f8:38:f1:6b:1a:b9:03:03:0c:e1:07:52:37:11:
         3e:52:b3:e1:23:e9:d1:50:e3:32:4b:94:fe:66:b7:66:3c:f4:
         a8:b4:22:53:21:18:28:1c:75:71:ed:af:00:5d:88:2c:de:f4:
         5f:13:2b:a3:ed:e3:9b:26:c7:9e:d8:70:98:3a:17:89:43:ee:
         9e:ea:33:e5:73:34:9c:f2:29:20:72:b8:b7:38:51:b7:47:c5:
         5b:12:08:85:b6:33:71:99:e4:13:01:51:20:83:eb:dd:3b:3b:
         36:ba:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:43 2025 by rpki-client