Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
File:                     07af84c8-ee29-3120-8019-a82a12b3b51b.roa (raw, json)
Hash identifier:          8LLX1t1+1Gk4iv6JhSoiRNRGdr07q0H7mWDYmnudA7g=
Subject key identifier:   5F:F2:F1:E1:07:16:91:75:44:57:86:B9:26:2A:63:32:1A:6C:65:26
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584B9E07CD73DB992D0081F4EE80
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16527
IP address blocks:        162.245.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:cd:73:db:99:2d:00:81:f4:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=7aef9e54-d6e1-4fec-b2be-f2487e837043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:f9:b1:fd:1b:b9:67:49:09:63:3e:01:b8:
                    39:b6:6a:06:b0:41:5c:05:a8:06:de:f1:cc:97:a3:
                    c0:4e:c5:56:e7:ab:a6:9d:04:f0:d6:39:76:fa:87:
                    24:85:50:0a:37:6a:e3:e1:c9:56:45:a7:3f:af:43:
                    41:c6:7d:bd:f6:2a:25:6c:b8:80:49:98:33:ac:1d:
                    e1:d5:96:5c:eb:aa:27:91:e7:ae:b4:2a:72:fa:d8:
                    0e:f0:1c:53:45:8b:61:81:11:0f:1d:50:9b:4f:82:
                    bc:7a:3a:32:94:34:94:fd:e8:b6:5e:6b:ed:ba:dd:
                    61:37:e9:e0:e7:e4:e2:4c:34:e8:eb:3f:63:f2:6b:
                    91:8a:8f:0e:8e:d4:8f:ec:f0:8f:49:2a:e3:ec:61:
                    f2:c6:30:f2:cb:c5:20:d0:9b:07:08:87:11:1f:ca:
                    cc:dc:99:88:49:13:32:23:8f:18:5a:cd:b3:45:13:
                    c3:ba:ea:b9:7d:4d:9c:29:ff:40:0c:3a:2f:29:c8:
                    b5:0c:7a:66:41:1e:97:3a:fb:7a:4e:75:86:8e:2a:
                    9d:68:ce:a2:c2:72:28:31:7f:f4:5b:3c:82:08:8e:
                    f2:a8:eb:74:9c:09:25:02:66:8b:c2:ad:51:34:fd:
                    a4:25:b1:44:ba:fc:8d:50:0b:a8:aa:cc:53:ae:78:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:F1:E1:07:16:91:75:44:57:86:B9:26:2A:63:32:1A:6C:65:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:61:5b:a1:0c:50:b3:cc:60:ec:0f:4a:0e:14:93:23:98:8c:
         2c:65:cf:05:dc:d0:41:a4:58:d7:f5:b4:5b:ec:8d:8a:df:56:
         46:db:88:7f:7e:38:1b:50:b0:f1:c9:0f:13:a3:29:f9:66:34:
         13:c3:0b:dd:a2:d7:e3:5c:50:cd:d0:ee:2b:24:7d:98:ca:af:
         72:43:c4:12:04:55:bf:6d:9a:45:34:91:3f:2f:37:2f:80:ef:
         c3:f6:79:47:45:e4:29:d6:f9:89:ea:fc:f2:8e:11:06:02:ee:
         74:6e:54:67:b1:62:91:eb:8d:03:0b:74:eb:39:34:4d:42:8d:
         04:d9:e9:2d:ab:45:9d:04:f4:5c:9c:d9:7e:d3:28:f0:cd:25:
         f4:ac:06:fc:2c:b4:b2:f9:6c:3b:f6:df:ea:54:a2:98:0c:81:
         da:06:3a:4c:e8:08:4a:12:28:75:a4:95:e1:70:c4:0a:5d:fc:
         b2:5f:0b:57:47:26:a3:64:f8:c1:19:d9:4e:2a:8a:ce:36:84:
         94:78:23:a2:ae:12:09:b0:3d:40:82:2b:dc:41:54:70:02:bd:
         93:6b:cd:29:87:30:7e:64:c4:42:6c:21:a5:0d:9d:76:dc:f9:
         93:2f:1b:4d:69:3f:14:3d:77:24:c3:13:7e:fc:9e:67:cb:13:
         b6:6a:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:56:04 2025 by rpki-client