Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/82cb96e7-9644-342f-9f72-1e484474a78e.roa
File:                     82cb96e7-9644-342f-9f72-1e484474a78e.roa (raw, json)
Hash identifier:          Yb6HIGvJwy2T6bvmSBrDmHEkOFXdAvXM97an1mzkenU=
Subject key identifier:   48:7F:E4:D7:B7:F0:3E:72:58:69:C4:D0:DD:6F:BE:C6:91:E2:51:82
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584B9E07D428B5D6A0F9BEE040C0
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/82cb96e7-9644-342f-9f72-1e484474a78e.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     834
IP address blocks:        199.255.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d4:28:b5:d6:a0:f9:be:e0:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=554c1762-7e83-4224-abde-a0c177119eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:52:ee:f0:1e:8f:c1:65:3d:1b:e1:a1:c9:
                    ee:9b:d3:72:24:4c:14:87:3e:18:40:e5:f4:e5:87:
                    e8:8d:16:85:9a:a4:0c:f9:49:7f:ad:d5:d8:fb:d4:
                    97:62:ff:4b:66:74:75:34:00:11:38:8a:9d:f2:32:
                    26:f3:46:fd:c4:37:93:06:34:f3:1c:c5:ee:db:5b:
                    b6:91:2c:6e:58:5e:40:bd:15:a9:60:ed:7e:85:bf:
                    0b:00:be:e4:56:64:d1:49:cd:5b:ff:c2:3a:8e:28:
                    5d:54:64:aa:34:6f:65:32:e6:b3:9b:ce:13:88:b3:
                    b2:34:9d:17:5a:86:e0:4b:7e:36:18:49:53:b9:b9:
                    39:3d:43:c1:cb:57:65:84:ba:75:e9:19:4f:8e:69:
                    2e:49:b2:51:6c:0d:69:c4:da:70:5d:3e:cb:c2:8d:
                    b3:80:4c:86:69:b0:0d:6e:83:6e:25:96:6a:3e:56:
                    ed:ce:2c:9c:48:5e:bb:3f:77:c8:53:0a:14:7b:69:
                    c3:07:70:aa:6f:9f:82:78:97:a5:1b:e0:0a:11:a2:
                    f3:4c:ed:7a:4e:0b:b3:bb:43:19:38:ce:d0:c6:a0:
                    4d:4b:d1:32:f8:ce:e4:9d:39:78:b8:36:ff:85:f5:
                    ab:ef:bf:1f:13:9c:27:93:ae:ba:31:8f:fb:d3:48:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7F:E4:D7:B7:F0:3E:72:58:69:C4:D0:DD:6F:BE:C6:91:E2:51:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/82cb96e7-9644-342f-9f72-1e484474a78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:ad:40:a6:f0:ab:8b:6a:85:02:99:0f:6a:8c:14:27:19:
         97:26:ad:ad:ac:d5:09:d7:f8:ef:3c:20:f1:34:59:6c:7f:f4:
         80:75:7b:71:cc:c0:0b:a6:df:c9:17:f5:ef:a6:00:4c:63:f5:
         ba:51:34:61:4a:6d:ab:3a:20:86:53:2c:22:9c:9d:a6:bf:88:
         40:21:45:7b:3a:57:59:af:2e:81:ab:1e:77:0f:12:af:a5:7c:
         10:69:14:2f:48:cb:74:11:bd:de:1e:8d:3e:d8:b9:3e:2b:25:
         14:61:ff:70:05:c1:46:ff:73:bf:2b:44:84:42:8f:4e:64:60:
         2d:d4:3b:58:19:1c:28:90:21:c8:21:10:fd:3e:da:d2:3f:09:
         bc:80:69:80:17:19:37:26:49:46:25:b0:3e:d6:89:a5:34:bf:
         1c:82:1d:9a:6e:c5:d3:38:8c:1a:13:11:3f:13:31:df:f3:62:
         d0:f6:1c:82:82:bb:fb:29:5e:45:70:32:c0:ed:89:1e:44:99:
         5c:ac:89:ef:55:8c:0d:ae:4f:d3:03:31:cf:f3:9f:bd:ae:ae:
         40:39:70:97:2c:9b:3e:ce:18:96:a4:be:c8:e5:63:7b:b2:e3:
         57:f7:21:02:00:f3:b4:ad:4b:4a:c3:58:e4:0c:e6:3a:94:af:
         1c:39:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:07:44 2025 by rpki-client