Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa
File:                     f672a23a-52c5-323e-aded-807a969f9369.roa (raw, json)
Hash identifier:          AbeMMhwgEPYY2EikKyMB5RSt1tNX7RGFuCc7YkqanCQ=
Subject key identifier:   5E:6A:FF:FC:62:37:A4:6B:B5:76:1C:EF:24:0C:95:D3:39:E9:7F:9F
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584BB88D103E5532D4AEC26DFE00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        147.124.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:10:3e:55:32:d4:ae:c2:6d:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=1fd636f0-3851-4ae7-b0eb-cd738a016b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:1b:9a:30:3b:6e:4c:b4:48:dd:b8:33:5f:
                    b7:6f:ce:ec:97:a8:77:a6:2b:1f:70:72:9c:74:a7:
                    e2:75:ac:fe:a1:05:24:01:fa:d5:4d:0f:36:e4:6d:
                    32:f1:6d:d7:70:d9:90:76:ae:5c:ef:50:5f:dc:0c:
                    aa:c8:3a:c3:ea:13:3e:08:c3:c4:7b:26:ad:07:cc:
                    0e:2d:ea:83:60:b7:4d:62:bf:35:8b:de:e3:e9:1c:
                    5c:16:24:89:3d:67:0b:20:68:78:e8:3c:52:16:a3:
                    c0:20:4c:8a:d0:84:01:03:79:fc:2e:f1:72:15:be:
                    d5:66:7e:96:92:fa:b0:2d:7a:48:a8:80:29:68:97:
                    d5:4c:4d:eb:d8:ff:4f:e7:17:f4:7d:7f:d0:f6:d3:
                    88:f6:da:5e:3c:49:88:2f:66:3a:4c:86:f5:b5:86:
                    ab:94:01:3c:8d:8f:0e:00:e6:ef:15:00:9d:44:69:
                    b5:58:fb:b4:cb:75:c4:d4:72:f2:3c:df:d2:55:e4:
                    83:26:fc:7e:0b:a2:3a:dd:2d:73:f3:cd:c8:83:e2:
                    75:85:8c:58:84:89:a3:08:e3:19:fe:37:c0:71:94:
                    ea:eb:68:11:bd:f8:c8:b9:fb:45:f6:5a:f8:33:75:
                    2e:0f:e3:34:19:2f:93:5f:51:19:64:82:30:38:01:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:FF:FC:62:37:A4:6B:B5:76:1C:EF:24:0C:95:D3:39:E9:7F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:f2:29:40:c3:25:3e:5c:3b:cd:dc:bc:df:52:2b:23:e0:
         72:31:36:83:18:67:6d:83:fd:13:0d:b4:20:a1:4a:32:0a:e8:
         dd:a8:2f:f4:5f:33:ad:89:f8:74:7f:00:90:a7:0d:a3:9a:a5:
         e3:94:e7:de:8c:cf:c2:aa:ee:02:56:14:c0:39:27:cd:f3:9e:
         e7:16:f9:54:32:6f:ee:1f:d1:9e:2c:f5:31:b7:10:dc:69:f1:
         7a:97:02:f2:bb:8d:d6:b8:38:26:01:08:a8:21:b0:43:5a:a4:
         0a:a6:ba:d1:89:92:b9:35:b1:48:b9:e0:74:84:ad:da:08:a4:
         8e:52:d7:ad:91:6c:f7:57:b0:98:ab:6b:75:79:b4:ed:15:42:
         e5:52:e9:86:c1:62:d4:ef:d6:ea:23:b0:b2:22:4c:59:0e:91:
         df:e4:4c:af:a3:9d:96:dc:df:20:56:a3:51:09:c6:d1:b7:a7:
         37:44:68:09:2f:0a:aa:b4:13:c5:ac:be:50:22:33:23:d2:11:
         d4:12:00:e2:bc:ce:a8:05:93:d1:76:95:cc:3e:7d:54:90:2c:
         7f:14:75:ad:a4:49:da:28:6d:19:04:9d:c9:ec:d9:a4:1c:9c:
         74:6e:4d:7b:f6:83:bc:e7:87:15:31:ca:fa:98:72:8d:a6:49:
         c6:96:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:55 2025 by rpki-client