Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa
File:                     fad7cd94-3e4e-3057-99e9-06d40e467d37.roa (raw, json)
Hash identifier:          Cyc++DdtBcQDNtUCDu9tGMmriImlbmBixub+dCxCa9I=
Subject key identifier:   52:1C:CC:F3:E6:9E:53:E6:92:8E:D5:75:55:47:D0:8E:8F:0E:18:15
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584BC10BCE33EF90993174BA0740
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     54994
IP address blocks:        138.113.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:ce:33:ef:90:99:31:74:ba:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=b4670912-d7a7-4e1c-97a8-c5dc035f90a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:bc:6e:65:58:01:07:1b:9a:bf:ec:21:f0:
                    2c:c3:93:54:4b:50:21:51:37:50:6c:b6:8f:0f:a7:
                    27:2b:81:6e:0d:03:25:22:aa:36:86:eb:8d:14:6f:
                    93:19:ae:42:e7:b4:39:02:78:97:93:2c:53:fa:ab:
                    e4:7b:4a:a0:42:fa:9a:34:a3:e4:bd:ad:34:00:e8:
                    3d:fc:36:6c:0a:52:e6:ce:ef:b8:e5:ba:80:17:b1:
                    ae:a7:1e:a4:88:96:12:cf:8c:fc:81:d1:6f:5a:7a:
                    a9:e9:12:a6:da:b5:40:1e:16:84:18:e0:86:4b:85:
                    a9:67:7b:6a:ee:01:c3:98:cb:50:b5:e0:c9:30:ef:
                    1a:9b:9f:52:37:89:de:98:20:46:63:72:6c:ba:f2:
                    9a:12:b6:2e:7b:2f:a3:8d:17:e3:12:ae:97:8a:9f:
                    58:1b:09:bc:52:bb:15:a0:39:48:89:93:a0:b1:f1:
                    f6:45:52:0e:08:07:ad:0e:39:d4:90:4e:3e:03:c5:
                    86:e2:36:a8:3e:cc:38:d1:12:df:3f:1f:10:b1:ba:
                    00:18:d5:54:d5:cc:24:da:4e:54:2f:0e:fa:30:f1:
                    03:92:67:97:f5:62:f5:92:e5:09:43:4a:5d:98:a1:
                    8e:0d:7b:7b:92:2e:94:ee:4b:e2:d7:61:55:c1:7b:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:CC:F3:E6:9E:53:E6:92:8E:D5:75:55:47:D0:8E:8F:0E:18:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fad7cd94-3e4e-3057-99e9-06d40e467d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:fd:38:92:7e:0d:51:ac:e9:97:58:c0:4c:2f:05:89:ca:
         06:ac:e2:7c:fd:73:87:6e:9d:7a:bc:c4:db:1c:7d:1c:5c:7a:
         51:aa:74:e5:43:db:78:d5:20:09:74:b2:3a:1b:37:e3:1b:26:
         ab:2b:30:a2:ad:24:ca:5c:cf:ab:f0:06:15:37:09:53:ee:ef:
         08:46:4c:08:c6:46:98:03:38:76:87:59:85:eb:1e:db:2e:3f:
         db:00:13:ba:13:a5:0b:6c:87:e6:8d:39:d2:c9:f9:3f:dc:2a:
         af:9b:16:39:89:50:26:6c:62:da:f8:85:55:b9:40:52:2e:e1:
         7a:d8:a7:27:ae:c8:80:88:f8:72:f2:79:4d:85:6a:ef:04:51:
         16:40:37:00:3e:09:9a:cb:05:2a:57:f4:ca:c8:bc:0d:f0:66:
         53:94:4b:cf:2d:0d:f2:4f:50:a9:ed:2f:dd:4d:8a:3d:69:54:
         02:13:6e:5d:c7:c2:96:64:98:93:b7:f5:04:74:27:c0:64:54:
         f9:78:7d:8c:9f:b0:27:a9:6a:c1:96:35:5f:bd:76:5f:8f:9b:
         ff:87:ba:2e:22:a8:f6:9a:6f:e8:d8:7b:c5:1a:ee:4f:74:55:
         8a:d2:49:f6:60:f6:bd:95:7f:e1:03:4f:3c:c5:58:ce:32:5a:
         c9:d8:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:11 2025 by rpki-client