Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa
File:                     d354875b-a314-3eb2-8777-47884d0ed9ad.roa (raw, json)
Hash identifier:          TNzKPuKJKpQGS9aa6Cu1OZ9FZXH8aoHmXH1047fabHQ=
Subject key identifier:   69:E8:89:34:64:95:3B:12:D2:89:7F:21:FB:85:7F:22:D2:1B:69:D4
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584BAD935FF3B869803E11F39C00
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa
Signing time:             Wed 29 Oct 2025 02:39:29 +0000
ROA not before:           Wed 29 Oct 2025 02:39:29 +0000
ROA not after:            Tue 27 Jan 2026 03:39:29 +0000
asID:                     55256
IP address blocks:        158.95.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:93:5f:f3:b8:69:80:3e:11:f3:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Oct 29 02:39:29 2025 GMT
            Not After : Jan 27 03:39:29 2026 GMT
        Subject: CN=3f66d14f-0138-4725-9136-44a40648668f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:81:d4:d9:73:ec:29:e6:08:ea:a7:25:ee:
                    0d:72:be:21:d8:ff:f4:8e:b1:ec:7a:89:7c:2b:6f:
                    1d:9e:cd:47:7e:b9:a6:f7:9c:80:05:e5:89:6e:8a:
                    cf:4c:81:3a:26:0b:7d:9c:cc:d8:5f:37:3f:50:6c:
                    42:e7:e5:ca:9b:44:f1:7c:a4:f3:41:c8:31:b0:6b:
                    90:0e:87:08:f8:5f:71:97:eb:d5:cd:19:1d:dd:dd:
                    79:b8:7b:c5:da:b9:f5:e3:1b:07:1b:90:e5:3f:45:
                    39:95:30:10:9b:d1:43:4f:7a:ee:c9:7e:c6:ed:d3:
                    66:c2:91:97:7c:a7:a9:cd:5a:83:99:3f:3c:58:83:
                    eb:58:0e:b9:2b:49:3c:be:09:28:21:08:a9:f4:43:
                    be:5c:0e:d1:4d:d3:a3:55:29:43:59:a4:07:73:c5:
                    6b:03:17:6b:fb:06:f6:53:71:8a:51:29:56:36:21:
                    2d:63:96:2a:ee:66:58:f9:ff:f3:e8:38:a8:5f:90:
                    f1:70:f2:6e:1d:7a:83:1c:08:5b:90:6d:48:f3:f5:
                    b9:a7:cf:cf:25:76:85:3a:f9:3a:bb:43:0a:3d:19:
                    ac:06:d7:a8:62:23:97:67:80:bc:bd:b6:a9:60:4e:
                    76:db:ae:46:41:28:d9:9a:8f:0e:3e:75:de:72:23:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:89:34:64:95:3B:12:D2:89:7F:21:FB:85:7F:22:D2:1B:69:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d5:20:3e:70:a6:61:ee:ab:bf:bd:3a:07:c4:d9:ee:41:1f:
         98:d4:6e:e3:3e:a5:65:81:2a:84:7d:ac:85:a4:19:1e:e8:46:
         dc:ae:03:44:d1:3e:ba:43:4e:75:e6:e3:ff:c8:84:4a:3e:63:
         3a:7b:85:7e:17:6c:46:36:4c:c1:ed:74:9b:9b:e4:e2:86:98:
         7b:30:45:51:da:57:f3:38:23:03:24:f8:b7:e2:29:4a:a2:b2:
         99:93:73:a6:a9:e2:db:41:82:50:f7:a0:68:44:ed:4b:b6:7b:
         b2:ff:a2:75:be:36:d9:16:6b:05:22:a0:e5:c8:10:63:e6:e8:
         25:0c:17:ec:5b:45:bb:04:cf:f1:38:a4:b4:20:a7:1a:69:9e:
         3c:df:0f:cb:97:9d:88:29:b0:63:7b:32:72:fc:b4:b5:8d:58:
         4e:3d:50:f2:2d:14:c9:1b:34:56:cb:6a:b9:82:cb:a6:ea:70:
         11:3d:b0:69:21:68:e7:ba:a6:00:2e:b5:c0:8e:2c:55:d9:48:
         91:5d:27:e9:fb:16:6e:01:04:fd:5c:56:99:45:f0:d2:61:01:
         3a:d6:bb:fe:6f:37:ac:0a:08:74:6a:21:14:b1:3d:1b:3e:58:
         bc:c4:31:b9:44:8f:fb:05:37:d6:c1:b7:8b:10:d7:34:ef:6d:
         a7:0e:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:53:29 2025 by rpki-client