Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa
File:                     28c091a7-3921-32da-8ea6-ea44e7007b7b.roa (raw, json)
Hash identifier:          ZI2vX2mHqBWcOx5y7JwMmYn71i16a2Ytv/0nQBKecis=
Subject key identifier:   A7:B3:D2:5C:36:64:B9:18:A9:70:60:BC:39:CE:3B:D4:91:24:77:5B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC270705B408BA36D42BEFC00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        162.247.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:70:5b:40:8b:a3:6d:42:be:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=7573ab0c-3f5d-4466-8f5c-855f40a990ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:95:f6:8d:0a:32:66:52:22:be:06:b6:9c:
                    6a:68:78:cd:25:fd:94:20:84:cc:98:ac:06:50:ba:
                    47:86:51:bd:47:26:ac:16:5f:91:ae:15:ad:2f:cd:
                    dd:87:4a:41:c1:b2:b3:5b:71:f9:ec:b3:3d:1e:f4:
                    1f:35:c8:97:fd:0f:dd:bc:0c:06:a8:6c:73:c6:a5:
                    06:6f:38:c7:e4:18:95:d6:d5:06:dd:44:f6:ff:6c:
                    c2:88:bf:97:0a:9d:95:60:bb:06:a9:e8:b4:3f:63:
                    3c:59:15:5b:32:58:f3:94:6a:95:46:66:e5:4f:fa:
                    c0:59:a5:f0:9a:3b:27:7e:e5:4e:8a:cb:94:cc:6a:
                    0f:01:8d:34:89:5e:1b:e8:f0:98:d2:31:41:0c:73:
                    ca:5f:62:dc:d6:1b:af:f8:43:d2:3f:b7:46:4d:07:
                    0b:e2:9e:ea:93:80:2d:c4:51:e3:b6:98:1f:39:e9:
                    a2:1a:40:01:d6:11:8b:fc:2c:bd:24:0b:f1:8f:c7:
                    18:e0:0f:34:92:58:12:0d:6f:59:db:d9:c0:cd:02:
                    2f:07:28:f1:52:f9:ec:93:c6:e2:5c:49:35:ed:b9:
                    1b:a5:97:45:5f:f4:25:34:cb:6e:ed:7f:b6:78:b5:
                    3c:65:b5:c5:97:cd:6d:1f:95:82:cd:da:60:82:e0:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B3:D2:5C:36:64:B9:18:A9:70:60:BC:39:CE:3B:D4:91:24:77:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:d7:05:c8:26:b5:0d:c2:d8:01:6a:1f:7e:5f:c2:a2:4e:
         f0:82:91:c7:18:67:e1:6c:29:06:65:d4:9f:83:14:66:37:f6:
         3d:89:ec:51:c0:92:e1:91:d6:5c:82:83:5c:04:ed:6f:eb:79:
         77:ea:7e:6f:67:a0:12:1d:49:e7:32:3a:9e:73:f9:82:4b:a0:
         9e:07:23:b4:cf:df:f4:2f:c7:65:10:5e:bf:e5:a3:c9:d7:3d:
         54:a4:37:43:b8:34:c8:18:e1:58:dc:a6:e1:73:e0:1c:a1:e1:
         30:76:e2:e1:df:e7:59:7c:cc:7b:fc:07:96:9b:29:02:f6:25:
         94:07:d7:cb:b6:3f:4a:62:fe:8b:b2:ed:31:00:0a:00:a4:81:
         3f:94:84:ad:bb:7b:08:5a:85:e8:60:b4:90:2d:7e:39:f3:8d:
         7f:6b:a5:e6:d6:e1:65:5c:0a:2c:7f:66:4c:cc:a6:34:7b:79:
         41:3d:b6:1e:cf:b5:f9:13:24:d4:42:61:4d:78:b7:64:ad:c3:
         ef:df:8c:ce:c6:42:64:16:23:cc:52:4a:6f:56:d6:03:ed:d7:
         87:58:49:c0:b4:b2:25:a7:b0:9c:4e:bb:05:cf:b4:4c:bc:8d:
         ee:9d:df:cb:5f:4e:7c:9f:b6:76:74:ec:49:ed:37:e3:bf:21:
         ca:3c:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:33:16 2025 by rpki-client