Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
File:                     292a1027-f298-3007-b93d-c51e00d0e2c4.roa (raw, json)
Hash identifier:          lqbFSdAV5WBIHHX4RCoOSuQep1mepsnwNKnS0/Dxzac=
Subject key identifier:   7C:67:22:E8:37:BE:02:EA:06:90:60:64:06:3D:A9:1C:8C:D4:E6:E3
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584B9CA23A3325DF628DE86C2380
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        160.32.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:3a:33:25:df:62:8d:e8:6c:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=f2378e0a-bf8d-4edb-a8ad-4c5ea04d769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:85:fd:a3:fb:48:8a:2a:55:f3:80:e6:d4:
                    6f:12:53:b8:1b:e9:98:cc:58:c3:0c:d9:25:1a:a3:
                    f9:2b:99:7d:d4:45:9d:a3:8e:de:a1:c1:23:02:9c:
                    fb:98:40:10:5f:7d:da:57:59:af:aa:85:91:1a:62:
                    58:3c:d8:c9:9f:22:b7:c0:97:e4:16:e7:16:fe:23:
                    ae:43:f0:4e:90:c6:05:7a:d9:e0:f9:50:7b:fb:19:
                    f9:92:f4:fd:a4:12:21:81:ca:70:15:15:d0:cd:b8:
                    9f:65:e4:cf:73:62:62:94:8a:74:2a:b5:be:ff:e9:
                    fa:bd:f6:a7:02:78:61:6d:1a:fb:da:25:65:c8:13:
                    01:8c:d9:15:36:d4:45:96:31:ff:ab:27:08:ae:33:
                    42:f6:3b:c7:f3:12:8e:ef:40:1b:15:08:d8:b3:cf:
                    a4:85:ab:0e:5e:c6:99:3d:92:f4:77:f1:84:a2:ef:
                    29:22:e2:c8:10:b3:97:4f:ed:ff:22:a7:09:99:50:
                    fe:87:82:b0:2b:38:53:91:b2:70:27:11:a8:a4:48:
                    3a:6f:d5:3b:33:d9:81:c6:11:65:81:61:c4:65:75:
                    b7:ef:aa:f6:c5:ad:90:51:dd:83:a7:87:62:a0:02:
                    43:d4:e0:0d:de:d4:9a:7d:36:e0:68:9b:e1:e7:29:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:22:E8:37:BE:02:EA:06:90:60:64:06:3D:A9:1C:8C:D4:E6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:5b:e3:46:84:36:6b:1a:5d:9b:fd:f7:78:fc:dd:b0:f6:
         0e:3e:d0:ae:2f:ba:f0:a8:f9:57:ad:4d:10:61:8b:5f:7f:7e:
         59:d3:05:74:38:0d:1b:bd:ad:5a:cc:3f:54:7b:ab:ae:15:78:
         dc:28:21:85:ac:65:9b:85:2f:66:64:59:e1:bd:d7:4c:d0:a7:
         58:6f:c9:14:7e:44:48:c3:34:20:3c:db:d7:1e:f0:61:c8:e1:
         c9:01:f7:7b:96:c9:74:7a:1b:b6:94:7b:1a:11:1b:e3:b5:52:
         1f:f4:3d:75:22:2b:8f:48:1e:38:8e:e7:e4:3f:18:c3:cd:66:
         26:66:5b:2a:f5:33:73:ae:ce:01:3a:01:36:cc:ac:62:42:70:
         68:c2:1f:28:63:78:c3:2a:55:fa:e1:63:64:53:b6:bc:95:84:
         14:15:d6:00:32:75:a8:0f:14:a4:68:79:8a:39:07:44:95:b5:
         cc:5c:10:9d:61:5d:67:4b:ea:e4:d3:ed:b9:b7:3d:98:19:7b:
         ea:1b:7a:04:c9:4d:24:a0:fb:bd:a3:3a:02:6b:30:ac:d8:39:
         91:f0:c7:cb:49:fe:fb:b2:f5:ec:16:aa:43:2b:06:17:1d:43:
         ce:5c:97:cb:5e:83:65:5f:e3:2e:bd:e6:ba:07:13:7b:0a:a1:
         4f:7e:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:29 2025 by rpki-client