Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa
File:                     372a2f54-16cb-3168-b82d-50a9c389b093.roa (raw, json)
Hash identifier:          lcY9qNfM3KZCNEG3NBRKp//0GaC5wI9kVHFd3LHZWQk=
Subject key identifier:   E5:A6:47:51:B5:BB:8B:E3:75:4F:97:D5:32:FA:CC:8D:FD:66:90:3A
Certificate issuer:       /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
Certificate serial:       010D0C9F4328584BC371B3FFCDB14F6A59EE9140
Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa
Signing time:             Wed 05 Nov 2025 22:39:26 +0000
ROA not before:           Wed 05 Nov 2025 22:39:26 +0000
ROA not after:            Tue 03 Feb 2026 22:39:26 +0000
asID:                     14298
IP address blocks:        134.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c3:71:b3:ff:cd:b1:4f:6a:59:ee:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe
        Validity
            Not Before: Nov  5 22:39:26 2025 GMT
            Not After : Feb  3 22:39:26 2026 GMT
        Subject: CN=77c6c146-954d-447a-83f1-7659aeb39da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:08:08:f6:47:5f:16:96:11:be:c6:11:68:
                    bb:fe:67:bc:ce:bf:43:fe:10:9d:51:a8:fd:77:76:
                    36:88:a4:17:80:bb:91:22:c4:de:cb:3b:89:9e:48:
                    63:f4:44:bd:7b:f9:e4:4a:bf:24:56:fb:48:ed:51:
                    65:5a:85:97:cf:06:2b:20:29:7a:f0:32:71:54:75:
                    28:bd:82:82:34:de:5d:64:9c:ce:32:ef:81:aa:53:
                    5a:27:39:c9:da:49:c6:45:e0:85:b1:78:c5:81:dc:
                    93:05:60:30:de:61:dc:85:0c:d5:c0:07:50:9d:19:
                    f1:44:11:6a:7b:8f:91:09:b1:1a:1f:91:07:9c:2b:
                    50:fe:7f:8d:78:54:af:ff:c2:25:e2:c5:e7:ab:f7:
                    b1:fc:98:5a:24:9c:97:dc:31:5d:5a:a2:f3:75:f7:
                    40:d1:99:b6:ab:00:6a:2c:89:38:bf:ab:8b:0a:4e:
                    e5:1a:b8:6f:99:ee:9c:26:95:6a:07:ce:ed:1c:07:
                    cf:27:53:19:8b:07:c6:1e:ef:b5:d2:ba:84:21:0f:
                    75:f7:89:32:65:8b:17:3d:fe:de:bb:fb:9d:99:ee:
                    a2:b5:78:64:8b:a3:ab:5c:be:fd:ea:7b:37:ab:d0:
                    4a:40:3b:47:fb:05:19:6f:8f:ae:01:7d:ef:11:4d:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:47:51:B5:BB:8B:E3:75:4F:97:D5:32:FA:CC:8D:FD:66:90:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl

            X509v3 Authority Key Identifier:
                keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:e7:c7:e0:3f:1a:6f:69:a2:78:e4:85:40:97:bf:22:18:
         85:f1:3f:d0:69:9c:82:59:80:42:95:c0:7f:42:24:b5:73:77:
         e2:04:6e:78:ff:cf:07:cf:19:72:5c:bd:f0:eb:9e:cd:2f:66:
         f1:4d:53:02:ff:a7:54:de:a5:22:ce:85:64:98:79:09:81:f9:
         7b:17:d8:30:fa:b8:4a:cc:c5:5d:38:ad:82:b3:1b:c1:f4:1a:
         9a:8f:17:41:5d:11:0c:93:1d:57:b5:a2:c2:d3:ba:91:a2:7b:
         c4:65:6c:8e:88:53:52:cd:bf:18:90:3a:0c:e5:3d:3a:d5:5a:
         0f:77:3d:d5:63:fa:5d:ce:02:2b:0d:7a:31:a2:00:1c:73:0d:
         29:9b:63:57:a1:d5:1e:2f:3b:84:b6:e6:2c:e1:f7:d7:c5:f6:
         4b:c2:b0:a2:aa:ba:6d:44:5b:55:80:66:37:1d:f3:8b:9a:42:
         46:d2:4c:ec:e0:06:7f:32:52:94:86:ff:24:57:ea:84:a7:a2:
         e0:a8:e8:ab:b6:fd:42:d3:a2:ee:be:88:19:ff:eb:41:8f:35:
         07:8b:01:4b:ee:9a:0f:1d:e9:2e:c6:f1:38:16:bf:37:e0:76:
         43:99:cf:0a:43:7a:57:08:61:01:48:35:55:fe:12:0f:72:c7:
         50:6e:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:15:48 2025 by rpki-client