Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa
File:                     f3c707ac-b579-39d3-ad25-79299f1b9b38.roa (raw, json)
Hash identifier:          pHOUfd1YP1iwFsmuU301QmE/2W1g9WEc6MwhF0ndUio=
Subject key identifier:   B5:05:87:41:16:67:EB:82:83:A7:56:AD:45:AD:56:0C:0D:BA:42:BF
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC27070A09B782CD340DFA2E0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        162.247.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:70:a0:9b:78:2c:d3:40:df:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=bada94e6-9493-433d-b148-40b1177a946b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:71:47:7d:91:ee:91:d5:b6:7f:68:3a:60:
                    94:f2:5b:4c:ad:9a:66:c1:b1:6b:01:6f:87:9a:52:
                    94:49:6c:32:96:43:b2:e7:f6:77:ea:83:ff:81:92:
                    99:75:cc:84:5a:ac:a9:15:b4:65:d8:70:bf:f6:c4:
                    c3:df:ec:d9:4f:23:a2:df:0a:a1:5c:5e:0e:e7:c7:
                    dc:e8:e2:05:a9:64:c2:52:59:ee:7e:d7:f3:fc:d5:
                    ab:51:68:9e:4c:84:95:1b:87:b1:6a:54:ae:cc:96:
                    03:0c:bf:3a:64:ad:3a:7d:b9:21:9a:7b:1b:18:10:
                    b0:5e:cb:2e:3a:0e:0d:98:ed:e1:36:c0:0a:8a:91:
                    38:51:f7:70:68:2a:bc:9f:f2:d5:fa:34:ad:02:c5:
                    c2:09:fc:9d:48:14:49:b4:6b:5c:12:40:2c:4b:e5:
                    58:3c:8d:db:e9:fb:c0:b4:00:b7:b2:7e:18:01:07:
                    8c:3b:db:41:c4:41:0a:ac:26:76:ad:97:63:54:3f:
                    37:b8:95:81:68:1b:77:96:d8:99:66:b3:ba:41:06:
                    ba:cf:e3:2a:6f:a4:e6:be:03:bd:d5:02:16:73:ba:
                    6d:62:8e:f4:92:a5:04:1a:5d:5d:52:36:98:14:e7:
                    a4:ec:56:af:ea:54:3a:a7:3c:2f:d6:f5:06:82:13:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:87:41:16:67:EB:82:83:A7:56:AD:45:AD:56:0C:0D:BA:42:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:3d:8e:ad:4d:be:1c:81:05:6b:9e:05:6e:de:e7:3e:78:3a:
         56:25:fd:cf:b0:48:c6:03:b7:ec:3a:6c:26:0a:eb:85:ac:75:
         1a:51:2c:72:b6:43:19:42:df:1d:5c:02:ae:e5:e7:21:72:23:
         65:3d:07:4d:98:1d:17:02:49:0d:07:56:35:ef:73:26:bb:a5:
         b8:cd:c7:45:e4:57:b9:96:65:54:70:c2:00:bf:c9:57:e7:d0:
         38:9e:c0:1a:2b:79:c1:73:e8:31:90:87:1b:a9:40:32:07:ca:
         7e:7d:f3:33:64:13:82:20:9f:f3:c3:ed:02:f7:d7:3b:1b:2a:
         d4:fe:4e:2d:14:08:29:e9:44:1e:b0:ea:59:8b:a1:ee:c9:ed:
         2e:67:43:25:55:4f:97:01:d3:da:f1:25:88:40:2f:05:e1:f5:
         71:a7:cb:f2:00:04:e7:e4:f5:f7:1e:a7:a2:bd:b0:2c:0c:66:
         bf:51:0e:75:b7:db:a4:6a:43:23:99:55:9c:b9:07:36:6d:3f:
         cb:cd:96:55:49:86:b6:10:66:f7:9a:94:9e:1c:ab:a0:90:4b:
         06:80:c1:44:7e:ff:9c:f6:d1:ea:84:df:d0:6c:0d:6d:02:a9:
         2d:06:7d:68:a0:ea:d3:e3:cd:96:67:29:8b:76:d1:3a:ac:39:
         3f:2a:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:57 2025 by rpki-client