Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/18ee8a0c-4ef0-3d73-88bb-a1dc403454ff.roa
File:                     18ee8a0c-4ef0-3d73-88bb-a1dc403454ff.roa (raw, json)
Hash identifier:          th5VRQZghsy9jSspzOD8ojxK61NY4bDqLzDSp3ppo58=
Subject key identifier:   8B:9F:36:0D:1D:BD:33:3D:D1:1B:E9:09:D3:93:8B:0A:EB:4B:AD:02
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584B99D7A11304E3284B15A0A600
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/18ee8a0c-4ef0-3d73-88bb-a1dc403454ff.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        159.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a1:13:04:e3:28:4b:15:a0:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=16eeab6b-3dc8-430c-9995-056e95c14e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:5e:69:83:8c:40:a1:1e:6a:78:d2:a5:aa:
                    a6:16:72:6c:17:e7:1c:37:96:ab:6e:e8:c4:ff:1e:
                    08:89:e8:de:22:e9:47:b0:00:e1:ae:6b:ce:88:da:
                    54:2b:0a:36:f7:e4:c3:c3:a3:4e:2f:4f:73:47:d3:
                    d9:9a:34:29:96:db:b3:e6:36:37:95:9e:7b:44:cd:
                    45:37:17:f6:bb:af:0b:6b:0c:4c:27:c4:d0:36:b0:
                    96:e5:85:5a:e9:09:64:1c:0d:c8:d0:3e:fb:48:1c:
                    e0:71:4f:ae:cd:58:15:12:3f:40:db:3e:c1:78:74:
                    a7:64:3b:44:f3:49:eb:15:f9:dd:8c:d0:56:15:64:
                    e6:9e:20:36:33:5e:9e:27:f7:29:cd:1c:ab:8b:9c:
                    d1:80:ac:49:57:85:af:7a:b4:1f:4c:1c:31:48:7c:
                    32:b0:e5:0b:dd:ca:a2:34:a8:05:20:26:12:9d:89:
                    73:2e:d7:9a:a7:f0:aa:f5:9c:1c:fa:54:16:3a:d3:
                    22:af:e9:1d:74:3c:97:1b:8c:74:95:9c:24:5a:02:
                    e1:1f:17:fa:67:02:da:19:aa:49:cf:ce:98:70:96:
                    f1:dc:7c:b7:ed:43:f3:19:25:d5:2b:75:d0:90:fd:
                    57:8d:2a:3b:25:ba:19:b9:86:54:66:10:e6:bd:df:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:36:0D:1D:BD:33:3D:D1:1B:E9:09:D3:93:8B:0A:EB:4B:AD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/18ee8a0c-4ef0-3d73-88bb-a1dc403454ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:f4:b7:0f:53:43:8d:f6:e7:e3:65:ac:25:d3:ca:3a:6b:
         39:45:64:32:b6:7f:dd:66:97:c6:d1:7f:aa:e7:6b:78:38:96:
         77:bb:9d:e8:45:a5:8e:ba:5f:9a:3f:fc:c7:bb:80:89:d3:d3:
         c9:1e:3b:33:04:1b:d5:9c:01:c9:a5:db:a6:2b:03:42:43:22:
         95:f0:1c:42:99:b3:61:bc:7c:01:7d:8d:98:1d:26:53:07:07:
         2c:46:7a:c6:f7:5b:0b:0a:26:81:5f:46:92:a5:33:c9:6f:89:
         74:5b:1d:7d:dc:4f:ff:b4:c5:35:88:5a:74:b5:dc:85:bc:15:
         e7:7b:a6:e8:24:36:91:3e:9e:0c:1f:b1:29:ad:db:a1:22:15:
         a2:84:26:2c:df:38:bf:42:78:ff:5e:2b:66:73:6f:9a:93:54:
         8a:b7:92:af:1d:9a:fc:45:ab:73:cf:42:7d:b4:7b:92:41:d3:
         70:ca:56:d1:53:3c:04:62:7c:83:b2:cd:a7:a1:e2:d9:1a:4f:
         05:ff:1b:d1:bd:de:c9:25:d0:94:96:ed:04:a7:e6:db:98:c9:
         80:4b:31:5d:c1:4c:f0:3e:32:26:61:4e:39:cb:cd:a0:24:77:
         9d:d7:e8:a5:3f:24:65:6f:36:5d:cf:15:5b:03:21:ff:cb:62:
         02:81:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:47 2025 by rpki-client