Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa
File:                     a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa (raw, json)
Hash identifier:          yqrmA5J4xB+s4UbL/2yayNGVZI7ug80pjPE8/bRpEjo=
Subject key identifier:   47:F2:D9:90:C4:58:15:49:88:A4:62:16:67:38:E4:11:19:C2:52:09
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F4328584B99D782262AF6C1796486E180
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        216.120.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:82:26:2a:f6:c1:79:64:86:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=93887e6c-989b-4f8c-956b-328b7f16add1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:07:5e:08:be:af:c7:15:4d:40:46:d1:83:
                    c7:b0:f4:cd:37:14:80:7d:7e:a8:fe:bb:55:39:9c:
                    38:ef:c9:2c:d8:51:25:a2:42:c1:6c:57:95:7c:a4:
                    12:aa:2c:4a:b4:2e:c5:6d:57:e6:b1:90:7b:ba:74:
                    69:26:c1:5c:bd:c9:01:1c:19:5d:94:48:13:ad:d1:
                    3b:ed:1b:11:9c:89:fb:31:17:74:a6:48:0c:bd:06:
                    96:ab:76:23:55:99:82:bf:a1:0b:00:20:9e:62:df:
                    2c:2c:fc:bb:b1:05:d6:54:f7:7e:bf:28:fc:05:ad:
                    7f:c1:5d:ee:6a:32:76:2a:32:ab:28:0b:9f:7d:d3:
                    c1:0a:70:05:cd:bb:af:c2:da:f8:da:84:2a:3e:56:
                    25:e5:fe:f3:d0:f8:11:f6:9e:35:69:d7:e4:6b:b1:
                    2c:b5:2b:43:40:02:c7:50:cd:39:8a:6a:a2:13:f2:
                    83:77:4f:71:ec:9a:2e:b9:ec:f6:36:23:f5:fa:e6:
                    f9:8b:f6:9b:3e:6e:f3:68:42:5e:85:3a:d1:4c:07:
                    47:28:2c:69:be:18:f0:07:c4:4e:39:19:b3:bf:c5:
                    c7:b1:ca:9c:22:55:4a:1c:c9:17:4d:3f:b4:a0:de:
                    04:21:59:2a:21:30:29:84:64:c5:b3:90:03:da:6a:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:D9:90:C4:58:15:49:88:A4:62:16:67:38:E4:11:19:C2:52:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:05:aa:c3:1d:22:37:84:12:ad:e9:6b:58:75:b8:4a:65:
         c3:9c:d6:fb:c2:e5:7b:08:f2:72:7e:7a:bf:ec:09:b0:76:94:
         a9:57:d7:d8:34:f4:b6:85:7a:48:19:11:c4:8b:6e:6d:4b:cb:
         93:63:07:04:82:2e:4f:40:22:4c:a8:73:7e:ed:4d:5b:b8:c5:
         7b:4f:8e:58:32:7a:01:86:58:c6:0d:8b:bd:93:fb:b5:16:18:
         f5:c2:a4:53:c0:f1:3f:bd:03:e8:a1:56:79:4c:56:41:11:3b:
         fe:7a:5c:fb:69:e5:0b:08:c9:d8:08:ae:29:9f:36:62:ea:3c:
         b7:4b:e0:5c:f2:44:80:99:5f:e9:4b:bf:62:89:c1:95:ec:69:
         87:b6:a2:80:d3:76:da:ec:b8:0a:0f:b4:a7:f2:f4:ac:32:c7:
         19:39:63:3c:ec:09:ee:3e:56:d7:a4:ff:d3:30:38:15:a5:b1:
         c8:cb:49:f4:77:1a:ec:50:4d:0e:ba:ae:52:38:1e:8b:31:e4:
         f7:c7:89:94:26:32:7a:07:eb:d7:b3:fe:d4:24:29:c8:0d:7d:
         bb:5d:b0:af:a3:fb:8b:4b:dd:01:ab:ec:12:27:4c:06:02:54:
         36:0e:fd:26:6b:ad:c4:6d:18:ea:61:14:e4:35:58:66:53:3e:
         27:72:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:06 2025 by rpki-client