Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa
File:                     c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa (raw, json)
Hash identifier:          t4GrxPihmGxx1WuFjPLK0Xt8tzgJ6/SMEWaSHv5Ideg=
Subject key identifier:   4A:0E:12:34:0D:14:E5:67:00:51:60:FB:39:99:CA:5C:FA:DD:9C:C4
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584B99D7ACBCDCACFAED5440CD58
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     399275
IP address blocks:        172.81.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ac:bc:dc:ac:fa:ed:54:40:cd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=dc47a0cd-8827-4f9d-bc7b-9e39a8092e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:51:2f:8c:e2:c2:e7:30:bf:3c:b1:8f:c8:
                    7d:f6:49:4d:e5:53:ea:19:ae:46:60:e7:06:bd:e9:
                    90:59:3e:42:b6:48:c7:d4:0b:c5:70:2a:b3:44:7b:
                    f1:1c:fe:18:99:68:51:23:c9:be:bf:99:6b:fd:69:
                    be:7a:08:a3:88:c9:7c:2e:5a:54:ba:bd:6b:0e:cb:
                    2b:13:10:66:42:c2:5a:05:73:e0:98:dc:55:99:47:
                    3b:f3:04:4e:89:e8:ea:21:6c:6b:26:e5:db:7d:ea:
                    75:42:42:16:e3:29:e5:55:c9:f1:8c:b0:ad:05:93:
                    52:bb:42:8b:40:b3:0f:6d:9f:92:50:4e:b8:2d:7b:
                    0d:f2:f5:b7:af:1c:27:b8:d3:8b:a4:e0:b7:39:56:
                    33:7d:f5:27:09:82:84:73:b5:e2:f1:5f:8e:96:a7:
                    11:79:c9:b7:5c:c1:6e:1b:8f:09:17:c1:27:89:b4:
                    87:0d:20:20:29:8c:35:c5:3d:dd:89:68:4b:b9:1d:
                    68:94:13:ec:80:d9:0a:c3:e3:f8:22:34:f4:4e:00:
                    d3:77:9f:84:c7:a4:8d:ba:79:26:3e:e0:1d:1b:04:
                    71:d3:f6:fa:aa:15:98:a1:b9:e3:43:12:1d:1e:6f:
                    02:2f:41:2d:18:4e:ae:e9:1e:d3:9e:c9:0f:5f:ec:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:12:34:0D:14:E5:67:00:51:60:FB:39:99:CA:5C:FA:DD:9C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:51:e3:cb:fc:3e:d2:b3:6a:92:1f:3f:b9:ca:8c:e2:78:49:
         82:a0:30:42:1c:d5:7c:41:cf:2d:ef:59:9b:16:55:94:00:95:
         7c:04:a8:25:73:17:28:51:5d:5b:2d:e0:f1:bc:f7:f3:96:71:
         51:bb:e9:e8:89:da:a6:ed:ac:b9:b9:ab:48:4a:2b:b8:6d:69:
         ff:e8:71:08:38:1f:99:40:1a:78:0e:e8:82:65:b5:f3:24:76:
         cc:be:82:90:1b:a6:b3:83:a4:2c:c9:0b:41:3f:a7:64:05:b9:
         08:60:5a:b7:58:11:20:72:22:70:d1:5e:0b:28:d1:f6:f0:c2:
         4b:fe:ed:22:f8:7f:35:80:d5:65:e2:a5:35:03:e3:c1:7d:f6:
         c2:c8:1b:8f:b9:b6:da:7d:84:11:4c:e0:f4:89:49:fe:b9:81:
         df:65:e4:e6:b4:9a:2f:af:87:d1:58:ce:39:38:0e:f3:ac:f4:
         b0:92:c4:ea:39:60:58:95:cc:b9:30:1a:da:d8:29:28:74:20:
         ff:8c:a4:06:f2:9f:06:32:86:b9:db:c0:81:bc:9e:0f:19:88:
         97:43:9d:fe:6b:d9:ab:36:f8:e5:8b:16:e8:98:00:41:9e:ef:
         70:5a:2c:d1:c3:b5:0e:0c:72:0b:b8:5b:48:a2:ca:c7:96:de:
         c3:88:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:59:22 2025 by rpki-client