Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f505b211-1c2f-30a7-9cc8-56c3d6801952.roa
File:                     f505b211-1c2f-30a7-9cc8-56c3d6801952.roa (raw, json)
Hash identifier:          vznjU3zaXfQHVcHtGGd+fLKBk1mPf0j0iD20zCChMkg=
Subject key identifier:   F3:D8:C6:0F:0D:F1:53:58:FF:D3:CA:6F:DA:B3:9F:14:07:65:56:CF
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BBFA596B439AB1061AFB84000
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f505b211-1c2f-30a7-9cc8-56c3d6801952.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     22405
IP address blocks:        65.51.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:96:b4:39:ab:10:61:af:b8:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=a96829a0-435a-4ff3-9f2a-560dcedbfedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:0d:fa:3b:80:28:ef:10:dd:9c:c8:2d:5e:
                    fc:6a:0e:eb:9d:54:04:78:dd:a5:6d:4b:a2:b1:9d:
                    d0:55:83:3a:85:8b:3d:ee:73:5b:eb:df:07:d8:34:
                    3b:14:26:aa:21:54:a3:4f:02:94:81:3c:68:bc:11:
                    94:4e:dc:cc:81:3c:16:46:40:92:37:f7:60:ba:56:
                    52:a0:25:e0:a1:9d:0c:bb:50:17:63:7d:06:fa:11:
                    b5:0b:e3:09:39:f6:12:a1:e3:5b:ae:1e:98:a3:f9:
                    46:3f:04:c9:16:c1:06:48:ed:a0:db:71:e6:ad:97:
                    17:5e:1c:90:ad:67:c2:6d:bd:03:c6:06:66:bc:24:
                    c6:47:14:dc:65:cb:b4:c1:3d:fc:97:94:b8:82:53:
                    1d:23:e6:9b:5e:bf:03:7b:de:b6:ff:47:5e:cf:cf:
                    e0:36:57:cd:40:45:9c:b7:d4:d0:2a:e1:2b:08:89:
                    58:8c:a0:db:13:7d:c6:fe:05:09:00:93:b9:9c:f1:
                    56:b2:1d:84:c1:46:45:e7:2b:88:c6:fa:13:f9:1a:
                    34:06:f2:04:f3:69:a5:d5:30:6a:f2:ef:1d:df:93:
                    e3:c7:a3:ce:3a:49:51:0e:bd:ff:d8:ed:68:0f:12:
                    92:24:0d:ee:c6:6d:77:9f:13:f5:5d:ae:b3:fe:f6:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:C6:0F:0D:F1:53:58:FF:D3:CA:6F:DA:B3:9F:14:07:65:56:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f505b211-1c2f-30a7-9cc8-56c3d6801952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:e6:47:da:6b:cb:a3:2b:ec:d1:f7:90:f0:25:71:6a:e1:
         da:18:ee:17:37:75:af:6c:36:d7:f8:9a:54:bd:7f:25:24:ab:
         a1:72:f5:71:92:ff:5d:30:2b:6a:b8:18:ee:7c:c5:ca:75:9a:
         41:fc:f0:8d:90:c3:8b:7f:e9:72:c4:05:64:1a:e1:88:1e:28:
         b6:94:9c:d6:74:99:46:4f:2d:54:91:d1:d8:b7:3e:b6:28:77:
         ea:3d:02:bd:79:47:05:cf:b0:f9:6c:03:bf:e1:87:05:ee:1a:
         8f:37:8d:aa:47:a2:e1:b8:60:52:99:ea:f6:eb:f7:dd:fd:d6:
         6a:92:88:3a:9e:a9:43:c1:f4:ae:9d:c6:4a:29:f4:f8:78:9c:
         81:c4:28:90:64:fe:ff:ed:ee:e3:a5:2f:fc:d5:ab:dd:9b:1a:
         77:f8:2c:fc:4f:e3:8c:60:2b:9a:98:09:d9:c6:2c:aa:9e:29:
         c5:73:53:9c:ee:3c:88:62:0f:71:ec:6a:7f:52:f8:53:55:f9:
         3d:82:86:4d:fb:03:b6:d0:61:65:be:b5:45:af:11:94:2d:ba:
         07:8d:d1:90:2a:ab:f3:fa:ad:10:0a:66:da:c8:4d:7a:2d:2c:
         b0:ce:a8:9d:0a:b2:35:f4:d1:d5:b7:ff:20:7f:5f:13:71:f5:
         64:67:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:33 2025 by rpki-client