Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
File:                     e10ed7ed-a460-30b5-8436-83e581cb88dd.roa (raw, json)
Hash identifier:          zdhSo6WkZpBH+8uqUD98h1E+Rjt7Yk2cxb27nSGL5ts=
Subject key identifier:   3A:5A:A4:D3:D7:AC:D3:4B:B6:CD:8A:A5:98:88:A7:C8:D5:A6:92:98
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F4328584BBFA5A78E38AA1BA23821FCD0
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     8987
IP address blocks:        150.148.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a7:8e:38:aa:1b:a2:38:21:fc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=64c666a4-7072-43bd-a02c-40e3f3137fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:12:21:41:ce:18:ae:74:c7:03:cb:75:3d:
                    03:e0:8c:3c:cb:c8:06:d5:04:e6:0e:bd:ca:13:30:
                    e9:cb:17:a4:67:08:99:d6:11:e0:98:74:e1:15:61:
                    ce:c9:c9:94:82:d0:dd:c7:8b:4d:e4:7d:67:ab:9f:
                    79:ee:dc:c0:d7:f6:34:22:4e:dc:fc:be:0d:d6:e0:
                    0d:8d:2d:c1:bf:e8:0b:61:fb:38:f6:1b:96:3f:7a:
                    52:76:c0:49:6f:15:4e:86:7a:b6:58:fd:33:88:80:
                    53:6e:fe:1a:57:ff:5e:97:38:ac:d9:44:77:e0:47:
                    fa:db:c4:44:29:a0:45:6b:de:03:6b:ae:9c:67:ac:
                    c1:55:ec:b2:7d:0d:6e:aa:a4:ae:98:94:39:4c:74:
                    39:09:34:a7:f2:b5:47:c5:57:b6:0d:b6:d7:4c:c3:
                    ea:89:c9:a4:e0:63:db:82:aa:a8:74:ed:de:7b:fe:
                    83:72:e6:ad:a5:f7:e0:d9:f0:65:3d:3b:4a:23:06:
                    33:fb:b3:d5:82:f2:37:e4:03:6c:f1:0a:7c:c6:9d:
                    2f:43:da:67:43:20:3c:3f:2f:18:84:69:d9:f3:93:
                    51:e6:2d:d1:e5:72:1b:19:8a:62:dd:aa:ea:92:6b:
                    e1:81:a3:f7:ae:83:67:e1:c0:3e:98:41:cc:88:86:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:A4:D3:D7:AC:D3:4B:B6:CD:8A:A5:98:88:A7:C8:D5:A6:92:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:bd:1d:71:6b:7e:db:91:21:a0:ee:cb:74:3d:30:c5:24:
         79:cd:30:ee:db:f3:83:82:f9:30:94:ba:c4:c1:5e:16:50:b7:
         ee:54:55:9b:fd:45:2f:b8:88:a9:27:2d:63:6b:7e:92:2a:a9:
         f3:11:03:d9:b3:a7:60:d2:af:45:c3:14:de:ed:be:fd:8e:b9:
         aa:ef:f5:c7:bc:73:06:d6:64:27:c3:3a:8d:9b:27:37:68:2a:
         81:aa:4e:27:f0:d7:91:94:0e:ee:64:40:74:6e:8e:ba:af:67:
         d9:4d:d6:e6:c7:9a:53:7f:fe:76:0c:09:d1:56:e4:4f:81:11:
         61:f9:df:49:3b:93:b0:7d:ad:ab:15:24:a7:d9:3e:5e:77:96:
         60:1e:5e:6a:62:87:60:d2:33:c5:cb:53:82:05:59:a3:28:dd:
         04:3f:b1:af:49:5f:67:08:85:38:ed:4c:64:ca:32:43:c8:2a:
         11:f9:f1:1d:f9:b1:b8:1d:60:8c:9d:0a:0d:77:88:46:30:24:
         67:3e:f2:d6:fd:e0:ba:f0:69:02:49:b0:53:3a:0a:4b:46:d6:
         6c:6e:3a:b3:85:0e:bc:05:77:2c:d0:04:9d:6d:0a:f4:9f:6a:
         5a:23:8d:1f:a6:6e:94:8e:ff:c3:88:46:87:1f:06:75:3c:5e:
         d3:43:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:57 2025 by rpki-client