Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa
File:                     43c42f57-7861-3049-b15f-7232871b010d.roa (raw, json)
Hash identifier:          B7GjAac2irbYUbGmjNP9VEvXIc+GHQS7fbCS9KO9Pb0=
Subject key identifier:   2E:D3:AB:CD:01:46:B0:39:99:6E:7B:DE:5C:EE:60:29:F3:CA:CE:56
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07C28846DEC07AF4D31980
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        142.79.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c2:88:46:de:c0:7a:f4:d3:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=6dc26a92-8ec4-4129-acc9-2e6cca949088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:82:7f:b9:92:f2:41:84:44:04:3c:42:bb:
                    5d:8e:9f:87:d7:4f:28:b2:cd:5f:f1:54:25:04:5d:
                    81:d9:ba:55:8e:6e:8e:28:f7:8d:b4:74:49:3d:be:
                    93:81:44:dd:4b:96:2e:2e:e7:8b:ee:a9:4d:1b:89:
                    e4:b8:1e:37:92:9a:bc:1d:23:4e:2e:37:15:53:c5:
                    44:90:52:50:76:a9:a4:93:42:c8:98:d2:85:26:a9:
                    2e:98:2a:f4:3d:09:ea:e5:7d:cc:ed:ac:3c:ac:2e:
                    80:68:e4:ce:12:0e:7c:95:26:87:38:a7:57:38:34:
                    e0:b1:5a:96:0f:27:94:9d:c5:9e:6a:9c:b5:cd:0d:
                    99:27:95:dd:a2:4a:44:cf:fe:e5:17:ae:ea:0b:5a:
                    be:bc:00:b1:78:d5:09:e8:b3:db:1c:26:29:dd:c3:
                    85:59:0f:ef:be:a0:fa:fc:03:4d:d7:40:29:8c:e0:
                    b9:aa:32:7e:db:d7:d7:29:f1:e4:af:bd:26:8e:f5:
                    4f:79:c1:72:b7:5e:54:6f:88:ea:3f:a5:55:0a:a7:
                    75:54:be:4f:7b:56:b7:8b:66:df:fa:44:30:93:af:
                    fd:bb:7e:0a:ff:30:6e:1f:bc:dd:f2:4f:63:2a:70:
                    f9:2a:c9:aa:61:69:83:2f:b9:ae:2f:ad:7a:05:af:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:AB:CD:01:46:B0:39:99:6E:7B:DE:5C:EE:60:29:F3:CA:CE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/43c42f57-7861-3049-b15f-7232871b010d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:4d:df:03:ac:8d:37:d9:54:9e:97:2c:47:99:b8:47:74:
         61:af:d8:e3:4e:b5:fb:37:fa:1e:8a:62:7b:9b:01:13:72:b2:
         2c:40:85:c2:a9:21:64:58:32:b2:e1:3a:0c:95:4a:ed:b5:47:
         35:1e:86:bd:8a:63:37:ac:eb:01:41:fe:70:fe:2b:bb:41:fa:
         61:e0:6a:60:4d:a1:36:28:44:8d:0b:86:60:47:80:2e:0b:4d:
         1f:e8:9d:be:17:1a:cf:fc:e8:16:ec:50:b8:31:cd:71:ba:3e:
         82:bf:f8:b7:2a:9e:ca:5b:c9:08:b7:05:bd:dc:96:60:f6:d2:
         02:58:a1:bf:20:2d:1d:36:1c:51:0b:91:53:64:cb:3e:71:51:
         12:75:da:7e:b8:9a:c8:00:0f:59:8c:57:49:7e:d8:5f:7f:fb:
         a7:f5:75:2d:1f:9f:b3:4d:53:91:97:33:d9:6f:15:27:38:a0:
         39:87:06:3d:73:ce:23:5b:9d:78:55:9a:1f:a7:ad:34:ce:34:
         6d:f5:9b:3e:c1:72:ad:c7:90:52:70:2b:0e:dc:c9:5b:e5:25:
         d6:6d:da:41:9c:f2:22:4a:71:07:22:ef:10:30:aa:f3:87:79:
         22:c5:f4:48:45:4f:7e:05:cf:46:d5:ea:f8:b1:d7:44:04:32:
         e2:d7:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:52 2025 by rpki-client