Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b468bcf5-a4a9-35aa-903b-9836d4cf87b3.roa
File:                     b468bcf5-a4a9-35aa-903b-9836d4cf87b3.roa (raw, json)
Hash identifier:          6o1wiX4cltWLZrxJGzNrgoWCiSA7TuWUNUHxOLkUYIU=
Subject key identifier:   ED:C6:F8:63:71:8D:4C:1D:BF:A2:2F:13:E8:BB:7E:06:D4:DA:8F:B3
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC27071279E75BBF4E4189180
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b468bcf5-a4a9-35aa-903b-9836d4cf87b3.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        162.218.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:71:27:9e:75:bb:f4:e4:18:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=71bd7be3-7c80-482f-8872-2411553ae447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:c6:87:24:2a:bf:97:1d:6e:41:b2:c3:eb:
                    57:a2:f0:f8:6c:9f:02:a4:b9:02:0e:a7:80:80:e6:
                    13:0b:a4:2b:9c:48:33:f3:ae:bd:56:bb:71:55:5a:
                    7a:85:74:f0:b4:00:2c:54:f7:d7:b5:dd:47:11:c7:
                    ad:0b:1e:db:52:25:84:37:5a:da:c2:60:03:83:7e:
                    54:64:1d:cc:e6:7a:0e:c9:f7:58:22:70:e3:69:9b:
                    b1:41:62:a9:2b:d9:58:97:97:20:a7:70:e3:46:90:
                    69:f5:66:80:b2:0c:6e:e9:c3:fb:11:95:d8:d2:c8:
                    44:29:9e:ef:44:3b:75:c6:2f:e0:14:a2:1d:b0:bd:
                    6c:84:50:22:67:01:dc:20:6b:32:d9:f9:a8:24:53:
                    c9:14:de:8c:35:51:4c:83:77:72:d1:63:c7:e4:a2:
                    19:9f:82:4e:3a:88:e1:9d:d5:dd:45:e2:e1:a7:20:
                    68:eb:7f:4d:39:aa:eb:51:1e:d2:26:ce:a3:85:2c:
                    e1:7f:15:90:6a:2b:6f:14:30:b1:3e:b4:5c:27:33:
                    90:3e:b4:24:cd:1c:8b:b7:4e:f4:26:ff:37:6c:95:
                    52:ac:5e:4d:33:a7:e6:db:c1:b1:74:69:dd:1e:40:
                    56:26:d7:ba:45:6c:ff:bb:55:4b:78:11:46:1d:f2:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:F8:63:71:8D:4C:1D:BF:A2:2F:13:E8:BB:7E:06:D4:DA:8F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b468bcf5-a4a9-35aa-903b-9836d4cf87b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:02:6c:1f:84:68:82:fd:9a:80:99:10:d3:c9:92:da:74:
         cc:d0:11:d4:5e:b3:0a:ce:a8:ea:90:1d:59:7e:57:25:5b:2d:
         af:bd:58:95:66:e5:11:ae:49:6b:3e:3c:f9:f3:71:4a:b4:74:
         a8:cb:d8:f8:4c:74:c5:95:fb:22:be:9e:69:ef:f4:f3:4f:78:
         90:65:96:33:0e:cd:e8:9d:33:7e:d5:71:f7:1a:e4:2a:07:b3:
         53:94:c6:9e:2d:e2:08:69:97:0a:9e:18:a4:70:17:dd:d7:c5:
         e7:ce:91:1f:42:d2:55:3b:e7:30:31:1c:03:1f:e2:66:48:2e:
         f2:82:e9:3f:8e:de:11:96:d5:69:94:c6:47:55:33:39:4c:08:
         c9:b2:5b:d8:04:2f:85:0c:dc:c6:ff:33:de:1f:e6:fb:d0:6a:
         7e:a9:f6:d5:a6:c1:65:87:1d:c8:f4:95:55:14:ce:af:ee:db:
         44:34:76:cb:b5:7f:12:42:ac:f5:6d:a7:bc:62:81:8a:4c:7a:
         f3:65:2f:b0:b2:5d:3f:c6:99:73:e2:8c:a7:77:c0:15:b8:6c:
         4b:e9:21:46:81:0f:5c:34:2f:33:3e:0f:ec:8a:7c:44:6c:8c:
         e8:cb:74:28:3b:e3:6c:5c:81:c4:d8:59:42:86:dc:4b:fc:ec:
         9b:c2:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:20 2025 by rpki-client