Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa
File:                     bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa (raw, json)
Hash identifier:          azZ684Y5VALbKFkC3FouUaMQzTFFxzUaxJzIfLILKSw=
Subject key identifier:   34:2F:DD:02:88:60:06:BA:B8:E1:AC:6C:FB:4C:99:92:21:B0:2B:2B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B99D786CFD9B80B4C0E908340
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        134.224.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:86:cf:d9:b8:0b:4c:0e:90:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f5d5b541-3675-4c6e-a334-5a31c17c7b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:20:58:62:f9:90:bd:70:75:52:95:fc:cb:
                    3f:fe:46:91:f8:34:9b:3e:18:01:7c:c7:d6:a0:b3:
                    57:fe:97:5b:c6:19:e0:cd:36:c0:be:41:d2:25:d8:
                    67:dc:ad:74:7e:6f:61:c2:a3:c8:3b:74:13:78:b0:
                    e3:f9:ba:cf:e7:44:df:5a:30:49:ed:c8:f1:19:2c:
                    78:9c:82:81:22:4d:b4:69:72:a3:82:af:b5:ab:07:
                    38:9b:54:3e:08:08:00:1d:51:a5:61:93:ad:70:3c:
                    60:34:0e:8f:83:b9:ef:87:21:ae:be:fb:2d:94:bc:
                    92:67:a0:ae:03:9e:ca:a6:7f:2f:4a:94:60:8a:4c:
                    00:8c:15:01:9f:1a:ad:3a:ef:ce:06:21:75:ae:0d:
                    10:00:1b:eb:8d:60:6a:35:cd:de:86:2b:1d:0e:e2:
                    8c:e5:8d:df:6d:17:0e:76:8d:f4:73:bc:71:46:71:
                    c2:19:ef:b5:50:7d:a7:dc:c2:e2:ea:51:8b:6d:1d:
                    c4:03:43:fb:38:f0:f8:e7:f6:53:db:77:b3:19:62:
                    ab:23:8f:9f:75:69:a8:00:25:fd:55:ac:e4:ce:00:
                    bd:54:60:c7:46:ae:27:2c:ed:07:4b:ab:fc:68:71:
                    a6:00:57:ee:8e:20:84:d5:ad:f9:54:cb:1b:2b:6f:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2F:DD:02:88:60:06:BA:B8:E1:AC:6C:FB:4C:99:92:21:B0:2B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4c:bc:0d:ca:ac:72:4b:b2:07:4e:97:5d:4d:38:37:75:7d:
         15:85:0a:7f:a0:5a:51:dc:be:08:37:c1:1a:2f:51:e2:be:17:
         e4:d5:1a:e5:8f:16:3b:ca:43:f5:38:b4:df:98:fe:ce:bb:d8:
         d8:45:82:75:00:b1:79:a2:46:1d:05:97:2c:8e:1f:d8:4a:ab:
         fe:19:6c:82:af:47:b5:cf:db:66:ce:47:be:08:ae:5a:94:b5:
         98:2f:ea:a4:77:2b:9b:79:e2:11:7f:96:79:81:cb:9e:7a:7d:
         6c:cd:16:30:2e:94:a1:c1:8e:e6:77:32:f6:9e:74:67:9e:44:
         e2:3c:1f:0a:25:1a:50:e9:59:29:ca:3c:ba:5e:83:95:6f:d1:
         b6:1d:00:b8:c1:a6:03:1d:b2:f7:3e:85:7f:c8:84:ed:8f:32:
         8b:aa:d7:78:87:cf:27:b6:c6:43:8f:67:4d:7a:06:e0:c3:f8:
         35:cd:ea:a0:2d:f6:7a:df:52:aa:14:d7:c2:cf:06:4e:aa:c5:
         2e:72:25:5e:26:b5:77:e2:72:23:d4:7d:7b:88:ec:6d:ce:31:
         90:46:35:dd:8f:42:4e:1d:84:f9:63:73:34:4c:d6:06:8d:ee:
         a5:d2:8c:bd:42:cf:9e:d8:93:54:7a:ef:37:af:bc:34:9d:a7:
         7f:f3:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:16 2025 by rpki-client