Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa
File:                     b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa (raw, json)
Hash identifier:          SP4nKA3yEfyWI9/4bv6fNR3RL5gG06PhZ5g6CE2kyyg=
Subject key identifier:   EB:05:F5:2B:91:C0:42:82:67:3A:A0:FF:17:8B:5E:2E:C9:43:A5:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B9CCF90D3493651AC31AB05C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa
Signing time:             Thu 23 Oct 2025 02:32:01 +0000
ROA not before:           Thu 23 Oct 2025 02:32:01 +0000
ROA not after:            Wed 21 Jan 2026 03:32:01 +0000
asID:                     0
IP address blocks:        198.225.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:cf:90:d3:49:36:51:ac:31:ab:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 23 02:32:01 2025 GMT
            Not After : Jan 21 03:32:01 2026 GMT
        Subject: CN=8abaf9f3-b8ba-4325-b7c5-f320813453c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:19:9c:99:03:f7:89:37:bd:3b:6f:8a:70:
                    ed:d1:41:5a:6e:56:c5:01:0c:b4:76:87:6a:8e:3e:
                    44:6a:88:9a:ee:8b:f8:a2:15:ba:81:d5:90:53:f7:
                    95:66:84:31:23:74:d0:07:3f:8d:0d:b3:65:d0:35:
                    a5:79:a8:48:dc:a9:e9:d9:e2:70:0e:e5:45:32:08:
                    9e:1f:e4:74:25:d6:8c:af:a8:85:0a:c7:f6:81:3c:
                    11:3c:e3:33:be:1d:6f:96:4d:cb:5b:35:8d:49:38:
                    34:fa:8e:fd:23:e4:44:e4:be:15:01:67:21:6e:0c:
                    43:07:43:de:a7:54:26:e1:94:40:93:e6:7a:a4:8c:
                    af:d1:9a:19:39:58:4c:55:f7:64:71:4f:00:98:07:
                    37:8d:18:9b:8a:9b:a6:64:55:fb:0b:9d:e5:b0:fe:
                    99:c1:08:03:34:3c:70:54:a5:63:68:39:c9:2a:dc:
                    fa:82:58:c4:3d:e9:c6:d6:20:1d:31:01:bc:79:1b:
                    d1:51:79:9c:a4:c8:ea:f7:44:c3:5b:8a:98:61:79:
                    86:22:e2:8b:12:6a:ea:84:eb:24:e5:0d:28:16:eb:
                    e0:dd:ec:20:06:4a:87:b8:7f:8f:9b:c6:ad:05:ba:
                    ed:b8:82:cc:9a:01:79:81:38:88:e2:92:73:f3:7f:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:F5:2B:91:C0:42:82:67:3A:A0:FF:17:8B:5E:2E:C9:43:A5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:80:e2:11:3c:39:61:d5:0b:cc:8a:71:89:17:0c:ab:43:
         f0:51:8e:7b:51:57:7a:5f:59:b3:a1:ff:e9:1d:70:df:13:c1:
         a8:a5:31:0d:cb:d6:7e:29:cd:7b:c8:a6:ca:7a:6b:0e:43:2e:
         22:cc:65:84:46:90:d4:d9:c8:5e:0a:06:1f:23:20:20:3a:ea:
         92:c8:75:8e:31:cf:31:5b:b4:15:59:26:c2:47:69:93:85:c4:
         63:ba:e6:96:12:0b:61:99:62:f4:6c:b2:9f:c8:c2:82:89:67:
         25:4c:00:03:63:cf:76:04:ab:a7:43:f7:50:c6:d2:36:4a:9e:
         b1:0f:2e:c4:3b:a7:03:4c:a4:b3:7e:5d:66:97:60:9d:60:0e:
         36:cd:2d:1b:19:1c:54:26:e5:83:ed:77:55:18:5e:89:a6:c9:
         c3:c2:fb:5f:5c:a7:2b:9c:42:6a:31:54:50:3d:2e:65:ce:dc:
         16:d2:22:a6:cf:98:b1:64:24:3f:ec:0d:a1:16:12:10:d6:45:
         1e:07:e7:21:24:33:8d:b4:75:4e:78:d0:27:72:96:a8:4c:b2:
         7b:15:fe:ea:44:62:b5:ee:c7:8d:90:50:e3:9c:86:9f:21:c8:
         05:b6:c7:4b:55:8b:d3:1f:04:81:5f:5e:a9:2d:a2:ee:16:b2:
         1a:bf:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:08 2025 by rpki-client