Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
File:                     9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa (raw, json)
Hash identifier:          E4vPJ4RASW8o9tEiLC67GIZK3P+z7GBH/GWGh1CTE/w=
Subject key identifier:   DA:F4:6F:9B:C3:F5:6B:20:E5:E5:07:D0:EE:27:9F:4D:EA:1D:3E:53
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F4328584BA39D05750642987671C21C80
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     62490
IP address blocks:        136.175.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:05:75:06:42:98:76:71:c2:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=b2303c30-c26b-4b92-9e85-bf47fb641b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:4e:7e:01:2b:ca:5b:ef:c7:3a:de:ab:d8:
                    f1:75:f4:a0:ac:e4:45:2d:2c:68:3a:eb:93:cb:8c:
                    52:58:45:38:e2:6c:c9:38:93:ee:a5:11:5a:0b:c1:
                    60:20:46:f5:73:51:c1:91:89:19:84:9f:22:f9:59:
                    2e:75:37:89:9c:c3:74:16:88:da:29:f3:c9:3c:a5:
                    07:fd:99:4c:52:3c:be:8e:d7:68:bf:de:4d:ae:34:
                    b7:ec:3e:c6:32:ef:cf:7b:86:36:d4:73:c5:cd:57:
                    ed:c4:c5:a1:bc:15:ff:63:83:be:71:1e:e1:dd:70:
                    51:f9:e4:cc:8b:c2:6f:ee:e4:52:6e:10:95:06:f0:
                    f5:5b:da:6e:4c:4e:34:4e:42:4d:14:1e:8f:f9:7d:
                    ba:32:18:e5:dd:77:e3:9d:0c:fd:b1:cd:2d:27:c9:
                    17:95:cf:37:09:d1:70:04:68:94:ab:1b:74:cc:fb:
                    5e:e1:46:65:e7:9f:84:81:31:dc:62:a1:c2:bd:4e:
                    0f:55:f7:ee:1d:cb:82:99:0f:b0:1c:73:0d:0b:80:
                    99:dd:ae:11:8e:6a:db:fa:c5:0e:ac:17:7d:4a:07:
                    bd:f6:b8:a5:0d:c5:89:ff:0f:a2:54:34:24:58:56:
                    b2:ad:c9:da:05:32:af:0a:22:1b:92:62:ab:08:3e:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:6F:9B:C3:F5:6B:20:E5:E5:07:D0:EE:27:9F:4D:EA:1D:3E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fa:f6:5b:92:30:5e:e8:d7:76:2b:ce:f9:a9:69:82:17:c7:
         cb:0c:22:de:6c:f3:36:84:10:ac:58:b3:4c:8d:ba:f8:07:78:
         73:10:00:7b:a0:36:aa:81:01:55:50:4a:53:8b:e1:f4:f9:f0:
         15:9e:13:67:ca:a9:6c:dd:2a:d2:a6:14:4d:7d:30:14:17:55:
         f6:52:15:63:0c:f0:9b:c8:61:d3:af:d3:e0:3b:bf:19:ed:52:
         eb:ea:ac:da:99:9e:78:a6:dd:cf:1c:fe:43:25:aa:ff:5c:c5:
         42:69:e7:d1:69:f8:91:7d:74:2f:81:08:7b:f4:c4:7d:20:ee:
         40:7c:14:9c:35:e6:16:c3:12:4e:38:5a:c4:92:4f:ad:03:fe:
         fa:b0:f8:a2:f0:0e:6b:d9:24:82:8c:76:86:7f:a5:7e:37:d8:
         78:c5:8e:db:52:c4:94:76:b9:96:db:a1:7e:c0:33:83:b9:54:
         92:d9:8b:ae:10:62:04:19:1e:74:27:d8:eb:63:09:82:35:2b:
         9c:ed:00:cf:f9:fc:e5:48:0f:dc:bc:5f:03:63:19:e8:8e:9d:
         29:34:0e:f1:09:98:a1:c6:20:6e:11:af:18:7b:6b:07:b4:37:
         d4:43:1a:ef:8d:b7:00:62:9a:ec:b3:63:6d:45:cf:e2:dd:f9:
         be:87:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:45 2025 by rpki-client