Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa
File:                     d5c88d88-16d3-3f6e-b800-b605c8de4635.roa (raw, json)
Hash identifier:          ROdH3SbMTOpaK/MG7iTMF9UcO22kSRGZlFRMn3Moh5I=
Subject key identifier:   27:5F:73:2C:A5:CD:2A:D5:6A:A3:69:8F:B6:BE:CF:FE:81:FE:57:00
Certificate issuer:       /CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
Certificate serial:       010D0C9F4328584BB2F7CF7854478565A90F5C80
Authority key identifier: 31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     395662
IP address blocks:        170.10.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:cf:78:54:47:85:65:a9:0f:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2fccc839-d9aa-4f5f-b248-4adf4966d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:3a:1f:fe:ea:27:b8:87:6d:f9:9f:55:fd:
                    5b:4d:47:91:ef:e9:35:de:2c:3a:ea:57:8e:c3:58:
                    ca:ec:c6:6b:ad:67:b5:51:05:57:d1:75:38:04:96:
                    3e:60:74:2f:7a:9e:98:e6:74:7f:33:62:8e:83:b6:
                    c3:0b:60:73:76:92:c2:df:61:f0:86:aa:ab:93:44:
                    03:12:48:7c:e5:f7:72:f6:3a:3b:5a:29:6b:d7:55:
                    e6:cd:4d:35:69:87:12:3c:4a:4d:6f:83:44:99:82:
                    92:8b:ce:72:77:fc:44:a5:d1:3a:5e:ec:79:56:88:
                    45:04:7e:78:40:4e:80:d5:b1:c1:b9:5a:bf:a6:ae:
                    8a:4e:bd:1a:c7:da:99:95:7c:70:cc:3e:64:b2:b4:
                    a3:13:fa:26:1d:6f:b9:8c:79:2f:d4:75:0a:ac:51:
                    6c:1e:2b:e1:bd:68:9c:27:4e:27:74:77:eb:29:c1:
                    47:4d:8f:72:c2:a2:89:a4:cf:84:22:4e:4d:32:92:
                    fc:37:f4:0b:9e:69:8c:99:d6:a0:26:54:5e:44:08:
                    3a:bd:fd:9f:c8:b7:88:4c:3a:4b:3d:1f:03:b0:46:
                    6c:d5:c6:5e:b6:99:af:95:59:1e:02:54:fb:ce:76:
                    c9:b8:52:62:92:c2:e4:4b:8c:7b:d0:e1:db:a2:fc:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5F:73:2C:A5:CD:2A:D5:6A:A3:69:8F:B6:BE:CF:FE:81:FE:57:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl

            X509v3 Authority Key Identifier:
                keyid:31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:77:32:54:96:19:e5:4e:8e:f4:1d:99:94:27:d9:78:45:a6:
         e0:c7:fc:75:b1:55:c3:2b:a7:7c:42:34:87:8d:ac:b6:2d:09:
         b2:93:6d:18:89:88:64:8c:d1:4a:a9:3d:70:20:6b:7e:3b:1e:
         dc:f9:9e:85:42:84:56:ae:1d:90:41:5b:ca:b6:31:1d:f4:cb:
         a6:6d:f1:8b:48:10:2f:4f:46:33:59:94:85:43:1c:37:fc:f0:
         40:97:c8:fa:99:3b:eb:a5:40:ec:f7:1f:96:0d:13:03:d6:36:
         84:d8:9a:f4:42:47:07:49:68:f5:6b:aa:80:09:3a:8c:85:a8:
         2d:72:44:2c:d9:cb:dd:1a:b2:24:69:5d:16:02:d3:1c:71:cf:
         c7:e2:5c:09:fd:c1:7e:97:76:6f:e4:31:5d:04:21:7b:29:7f:
         31:9c:6b:35:31:47:95:75:3b:a6:89:4c:13:93:6a:1a:de:35:
         85:83:61:f3:62:a0:a9:a6:3b:72:6c:86:fe:26:0f:0d:20:15:
         de:0b:ef:c2:02:6f:23:88:f0:3e:00:cf:82:14:03:47:49:e2:
         83:43:49:aa:28:33:16:52:27:bd:10:a5:62:c1:8a:f7:e3:24:
         f6:7d:e4:9e:c9:f8:c5:a2:22:3e:94:90:98:38:a9:5f:1a:dc:
         37:e3:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:50 2025 by rpki-client