Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
File:                     5cea7fe7-35eb-332d-a713-9768d64cc717.roa (raw, json)
Hash identifier:          Ux8IF6/texNkpa7OgMXjYBi7oSJv3D7eotHrjBAovb8=
Subject key identifier:   88:46:B5:2F:9B:57:D0:2A:40:7B:CF:03:D3:01:65:4E:FF:BF:82:1D
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584BBA1037BE03415B5E7EDDF240
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     20205
IP address blocks:        168.245.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:37:be:03:41:5b:5e:7e:dd:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=dd701924-5d00-4304-8bae-663560d3d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:fb:91:1f:76:f3:25:29:f4:61:62:a0:e9:
                    e9:ee:d1:5a:70:35:3d:e5:a5:0b:a2:5c:d9:ba:b5:
                    32:75:44:29:ab:17:40:6b:f0:92:e1:8c:70:d4:59:
                    1c:53:63:e5:f7:55:51:8e:75:6c:d7:c7:d6:07:74:
                    46:06:9c:a7:44:fe:3a:58:57:aa:18:f3:11:fd:3d:
                    dc:25:9f:65:a5:75:5b:2e:78:d1:51:25:26:08:e8:
                    31:31:a7:83:3e:78:07:fd:e7:3a:41:5f:33:6b:fe:
                    1c:b2:2b:72:c4:55:e2:28:f1:8d:cb:d8:74:b3:b5:
                    75:3e:7f:18:d2:26:a2:4f:4e:8a:5c:29:e2:1d:3f:
                    a1:45:c2:39:81:a4:83:09:ca:aa:5b:de:21:87:b6:
                    dc:77:c3:f6:46:31:36:91:dd:f8:de:ca:37:fc:a7:
                    a5:b2:da:71:c5:c3:75:c8:c6:f5:56:46:2f:5c:79:
                    04:ad:c7:b2:d5:40:12:17:90:fe:49:43:67:11:bd:
                    3d:ae:d6:95:a1:db:9f:2d:6a:10:28:73:c5:f4:e4:
                    ab:c1:9d:3a:22:02:28:72:60:1e:62:30:77:65:00:
                    0b:57:13:26:04:bc:be:e9:c9:df:36:7d:59:35:cc:
                    47:46:49:48:18:6a:60:85:ca:13:84:a8:fa:9f:4d:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:46:B5:2F:9B:57:D0:2A:40:7B:CF:03:D3:01:65:4E:FF:BF:82:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:b0:a3:fe:08:29:91:18:c5:2f:04:47:8d:d4:03:85:3d:
         21:92:0b:c3:0e:a3:b3:a5:e2:fe:9a:47:5b:bd:d9:1e:f3:cf:
         00:db:48:e2:82:4a:5e:64:0d:d3:e7:58:e2:cd:9e:42:a3:d0:
         f7:da:c5:77:77:23:b7:33:68:18:55:85:21:7f:86:87:58:9a:
         80:c5:40:dd:c3:5f:c4:7e:98:50:e6:7c:71:32:09:99:3d:75:
         ff:57:d9:fb:e7:6a:a6:f4:07:4e:14:7f:b0:db:f2:d5:db:56:
         a5:56:fe:30:97:cf:48:37:5e:3a:6b:d2:c2:c7:d0:a0:e9:42:
         b5:ae:9f:01:c8:27:61:a3:8a:bd:e1:cc:d0:38:29:bf:19:cf:
         be:78:a1:f9:90:21:df:f0:45:86:39:04:ab:b9:dd:cc:9d:c1:
         f7:6b:4b:62:d0:2f:39:33:c4:cd:da:d6:6c:fb:da:45:ba:b6:
         fd:4e:08:76:98:bb:65:e3:05:49:c5:ff:35:c4:59:26:b5:55:
         4b:85:39:28:23:78:de:a2:0f:c1:39:43:0e:6a:f7:03:ed:71:
         77:dd:a4:cb:da:53:cb:5b:14:2e:c1:a0:87:f1:a3:6a:dd:58:
         5d:46:38:29:e6:fd:03:8e:6d:d7:22:70:06:1c:65:0c:01:f6:
         ca:e2:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:12 2025 by rpki-client