Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/f5e50e49-4a50-3b63-94ee-817e5775c932.roa
File:                     f5e50e49-4a50-3b63-94ee-817e5775c932.roa (raw, json)
Hash identifier:          DpfM2Lnd/ssYHjgPStJMIAOz4MlPGC8ce5txhDacCnM=
Subject key identifier:   48:8F:9C:CD:F1:DB:CC:13:E3:0D:ED:53:85:06:A1:C3:9A:48:87:62
Certificate issuer:       /CN=418fa580-3ab0-4286-8651-be94aeb174e2
Certificate serial:       010D0C9F4328584B99D7846B4B1720070D8B3700
Authority key identifier: B9:2F:10:77:01:60:76:0F:10:AC:DB:DF:D0:79:A7:E4:B1:CD:8D:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/f5e50e49-4a50-3b63-94ee-817e5775c932.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        144.86.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/418fa580-3ab0-4286-8651-be94aeb174e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/418fa580-3ab0-4286-8651-be94aeb174e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:84:6b:4b:17:20:07:0d:8b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418fa580-3ab0-4286-8651-be94aeb174e2
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=0069a90c-2832-482f-96d7-3f497a9e91d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:a5:b7:c1:f0:1f:67:a1:0e:80:8d:74:91:
                    ab:91:da:33:38:3c:e0:3c:8c:c6:e1:7e:e8:a9:41:
                    bd:29:47:f6:4f:14:5a:10:a4:d9:3e:e1:8f:be:ef:
                    8d:2d:8a:4c:8a:e6:2e:53:c9:93:3b:2f:8c:98:a9:
                    c8:5d:19:b0:39:bc:b9:39:ac:91:43:f7:5e:51:e4:
                    9b:ed:2f:2c:98:ae:3f:58:48:85:02:44:53:eb:38:
                    7d:fe:f1:e6:07:31:06:9b:94:ff:60:1d:73:d4:91:
                    78:25:92:19:3a:65:a6:49:f3:8a:31:3c:50:4d:be:
                    2f:50:b4:6d:49:47:7d:96:ec:67:5d:34:4c:07:f6:
                    50:f6:88:1f:c4:94:ee:57:25:da:80:85:2d:56:b6:
                    bd:1c:ec:f8:15:7b:30:04:95:1f:f0:7f:ca:30:fd:
                    90:00:68:5d:69:c5:45:54:f0:de:fe:c1:1c:a7:ff:
                    75:87:57:cc:0f:54:e5:28:77:06:5e:77:a5:8f:c3:
                    e7:70:36:72:b9:a8:c8:40:00:8a:7a:90:b3:dd:37:
                    59:40:66:b8:37:37:d7:de:02:3b:e2:b4:5b:34:2d:
                    a4:75:ee:b3:99:d0:1c:f3:3b:c1:12:64:a2:a6:d3:
                    bf:4e:a9:00:63:4b:7b:2b:4c:ca:9d:93:b6:4e:5c:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:9C:CD:F1:DB:CC:13:E3:0D:ED:53:85:06:A1:C3:9A:48:87:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/f5e50e49-4a50-3b63-94ee-817e5775c932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2/418fa580-3ab0-4286-8651-be94aeb174e2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:10:77:01:60:76:0F:10:AC:DB:DF:D0:79:A7:E4:B1:CD:8D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/418fa580-3ab0-4286-8651-be94aeb174e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c2:83:15:83:ba:31:83:98:f1:74:7d:c3:59:bf:11:ef:33:
         43:5d:65:b9:be:3b:10:3f:16:18:f1:26:cd:c5:70:6e:ef:4a:
         18:e1:7d:c2:98:ab:2a:40:5a:36:3d:ab:8c:ac:24:e6:49:12:
         ae:57:63:62:cb:f0:83:13:0c:25:c2:be:7e:97:23:96:f7:6c:
         3e:53:1e:eb:64:21:a5:02:fc:f4:74:97:fa:4b:09:83:5b:ea:
         a0:d7:7e:c4:fc:6d:c7:3e:e1:ac:05:49:ba:6b:46:57:17:0b:
         49:bd:4b:a3:10:67:d3:82:1c:d7:3e:26:f3:f4:2d:3c:e0:d0:
         24:2c:0c:dc:7d:a4:9f:6e:d0:10:f2:fd:8f:8d:60:d1:2a:5f:
         81:22:6d:5a:79:26:60:c3:56:ca:a3:e8:45:70:d8:73:84:71:
         a0:7c:fc:e8:6d:dc:61:a4:fa:07:58:bf:df:a0:b6:ef:99:cd:
         9b:fe:75:be:7e:ff:ca:3e:08:48:4e:bc:60:b3:e5:d2:c1:61:
         d2:5a:2b:be:43:6d:80:43:bd:6c:f3:b0:9d:3a:57:02:19:e7:
         27:40:b3:db:cc:63:c8:42:69:f6:6f:8f:22:a9:6f:b7:2e:6c:
         a0:8e:a2:b9:cb:2d:fc:a7:d0:c3:6f:34:4c:c2:79:52:8e:68:
         83:15:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:01 2025 by rpki-client