Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
File:                     350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa (raw, json)
Hash identifier:          kjfs086GPWsfFGaLyWmVjU/UW1OG/GG57NoCWkv7NJ4=
Subject key identifier:   E5:2D:B1:8E:69:85:1C:29:74:8B:90:05:82:97:DD:E8:52:99:5D:E6
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584BABFD0C28EB21CF25D2FCE1C0
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     22925
IP address blocks:        162.211.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:0c:28:eb:21:cf:25:d2:fc:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=16a44ca9-9efc-436a-bbfe-9a34363eb3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:e8:7a:ee:02:a7:a0:ea:40:7b:8f:ac:73:
                    3e:e4:de:39:00:3e:e8:95:21:25:26:6b:86:f6:4a:
                    99:bf:6b:26:68:bd:1c:19:44:d5:de:45:73:ec:17:
                    e7:73:7c:ff:c5:0e:04:55:d5:85:a0:80:2f:0d:28:
                    35:c1:d7:df:a1:00:89:20:ba:4f:5a:fc:20:a4:23:
                    15:9b:3b:b1:18:95:8b:f4:77:2e:c5:09:1d:fa:d8:
                    d4:cd:38:9c:b6:59:fb:5e:0d:4d:0a:ea:4e:be:00:
                    b9:8f:3a:80:7d:62:af:c0:3c:37:46:1a:7b:4d:cb:
                    36:da:0c:1d:94:df:b5:74:ff:74:30:79:18:62:c3:
                    20:60:87:4f:ac:e6:49:02:b4:f1:96:ce:c0:68:35:
                    01:5a:42:45:4b:da:c2:5d:e0:53:c6:4e:0f:2c:80:
                    43:3f:ea:3a:aa:b1:43:3b:9c:13:d0:b8:af:0c:30:
                    6d:af:d0:bf:0c:ee:87:1a:59:eb:10:c6:e1:97:6b:
                    05:c0:b3:37:88:75:2c:4e:b6:d0:ae:8d:c8:fa:fb:
                    90:59:39:12:55:23:8a:24:5e:38:d8:f1:15:de:62:
                    4a:c1:7d:99:5b:a9:a1:2a:8b:ed:9b:e9:89:c8:9f:
                    92:01:49:ed:e7:f3:cb:62:25:50:b8:4c:44:7d:aa:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2D:B1:8E:69:85:1C:29:74:8B:90:05:82:97:DD:E8:52:99:5D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/350d7704-2eba-3dc1-8ae5-cfa8c076931f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:67:c0:0d:38:0d:ba:7e:10:98:b5:54:2d:07:a4:78:b1:35:
         59:ae:12:30:3c:75:6f:1e:15:5e:bb:44:08:04:95:c2:a8:d2:
         1a:c7:37:e3:72:9d:77:5d:2f:a5:c6:89:2a:80:83:a7:8f:99:
         f0:1b:fc:9b:97:9a:95:2e:ed:fb:47:da:10:df:21:81:be:30:
         b8:6a:9d:71:93:40:1c:04:48:7e:44:f5:f0:10:4d:60:a1:4b:
         25:d4:1f:b7:22:43:f3:14:e6:d8:bb:a7:73:d1:9a:c4:d7:02:
         10:59:f9:4e:e2:a7:38:03:66:57:11:92:3f:61:4c:de:30:dc:
         cb:ab:df:1d:b8:70:cc:5b:25:39:d3:62:62:ae:ff:ff:b3:76:
         96:5a:5c:a2:e0:17:b9:b7:45:b1:85:57:b3:c2:0e:05:9d:30:
         05:b8:0d:4e:0f:c2:3e:bd:bd:0f:13:b0:23:37:98:3c:41:7d:
         eb:56:e2:a5:d7:59:0c:02:8b:92:d8:3c:c9:d9:6b:02:17:89:
         44:4e:07:6e:7b:f9:02:d1:ef:83:42:de:75:7e:c0:67:af:23:
         1b:df:00:8f:93:c4:e3:91:08:3c:44:6a:36:40:be:84:87:dc:
         f9:19:1e:52:05:14:e3:2e:bc:01:5c:25:a4:17:88:93:13:27:
         89:d6:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:47 2025 by rpki-client