Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/81ca092a-0c5f-3e3d-951f-848b3136230e.roa
File:                     81ca092a-0c5f-3e3d-951f-848b3136230e.roa (raw, json)
Hash identifier:          sxWh8mFimcasrzf/efqev2kN81HYcbZFIN3FvMTVRJE=
Subject key identifier:   79:3E:0F:30:62:F3:30:A9:36:43:E6:85:F5:7E:C6:81:E0:34:BD:B3
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BAEC7B47D5B1D17EA48C78480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/81ca092a-0c5f-3e3d-951f-848b3136230e.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     11572
IP address blocks:        131.153.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b4:7d:5b:1d:17:ea:48:c7:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=dd10e6f0-5535-4071-97eb-e9f2435b6369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:b8:6c:00:89:a3:cd:09:49:e4:59:30:63:
                    4b:ab:56:96:4c:4d:3d:38:52:b8:db:d1:62:b5:32:
                    24:89:f7:c1:28:b2:0e:3c:bf:1e:3e:90:68:5b:5f:
                    fe:f5:52:85:c1:ca:ec:78:f0:ab:c6:24:0e:63:35:
                    3e:62:dd:0d:c1:f9:2a:eb:58:7f:e9:94:bb:70:f7:
                    9f:b0:63:9d:ce:f2:6e:34:83:4f:69:e0:82:09:aa:
                    93:49:7f:fa:01:6d:c8:04:c1:81:71:3a:b9:7e:d9:
                    30:fa:f3:e3:11:9b:25:70:f3:2c:fe:29:2c:dc:e0:
                    13:bc:17:9f:e0:68:ad:6f:80:91:09:8b:d1:78:d3:
                    8b:ae:7d:63:53:91:d2:3a:88:eb:d3:f8:5f:cc:78:
                    96:43:ad:71:02:bf:46:c1:6c:d7:a9:8f:5c:d4:ba:
                    b2:59:08:ad:85:dc:b4:9b:b6:19:10:f0:3a:85:f1:
                    e1:54:7e:4d:72:d5:2a:eb:f1:bc:9e:2b:e3:d8:8a:
                    ba:a2:f3:fe:04:76:c9:03:d4:2f:f6:1a:8a:b6:e1:
                    1d:16:5b:ce:a6:8f:ff:9e:d0:4e:5d:55:9c:2f:0c:
                    5b:0a:11:02:69:9b:a3:ad:f8:ee:fd:52:b9:c9:2f:
                    97:be:e5:02:5f:a9:a7:e2:3a:c5:1b:17:53:6e:69:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:0F:30:62:F3:30:A9:36:43:E6:85:F5:7E:C6:81:E0:34:BD:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/81ca092a-0c5f-3e3d-951f-848b3136230e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:80:28:32:35:e9:ff:f3:a1:c5:ee:b4:23:23:0b:b2:1f:
         39:76:87:07:84:ce:5b:a5:cb:72:6f:35:10:f2:cd:ca:db:ab:
         61:6a:c2:3e:3d:f8:d4:7d:f3:15:e0:b7:f8:11:04:3d:7a:e2:
         b5:53:ba:c2:56:ff:59:c3:91:55:05:43:ab:d4:0d:67:5b:05:
         7a:44:51:2b:06:11:3c:97:fe:9f:91:8e:e9:b2:0c:6e:21:06:
         49:fb:ca:58:6d:09:5c:08:87:22:f1:16:a0:e9:6a:a9:6c:1c:
         a6:55:3e:d9:02:67:fc:9b:d4:23:a8:1d:6a:86:aa:91:de:83:
         b1:93:5a:22:ea:e5:11:a4:61:cd:e1:af:59:61:67:f8:8a:37:
         7c:80:c4:fb:3c:33:89:a6:d5:be:d8:fd:a8:e9:0a:19:54:d5:
         d0:a5:90:86:6d:d7:01:41:54:ea:d2:d9:58:fc:6b:06:87:d0:
         a3:5e:54:b5:09:60:8d:d9:1d:5a:78:e2:cb:51:2d:5d:47:6c:
         d5:23:45:83:d6:24:ac:55:56:df:3a:5f:86:16:3b:9f:c0:92:
         f6:16:f1:ee:7d:02:67:dc:a8:ae:2e:7c:80:cf:e7:c2:cb:fb:
         94:be:b2:e5:9c:c6:a5:1a:11:f5:07:04:96:82:1d:a9:3b:d1:
         69:5f:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:39 2025 by rpki-client