Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa
File:                     d97bba36-eba0-3176-b968-980f5a55ba17.roa (raw, json)
Hash identifier:          FgZBuDHB4gvJychDcgzdtVxZjzONv0SCAgXKfnICx1A=
Subject key identifier:   A3:7D:FE:A2:86:7E:4F:B4:70:54:EE:9E:88:D4:2A:11:A2:AE:71:CA
Certificate issuer:       /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
Certificate serial:       010D0C9F4328584BB192873EBC8224BD6E394536
Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     208414
IP address blocks:        195.85.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:87:3e:bc:82:24:bd:6e:39:45:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=a8cdac44-da65-43a4-95fd-dff2cc1422e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:11:56:ec:b8:b1:17:c8:77:ab:65:ff:03:
                    b2:61:8b:b5:74:69:1a:53:c0:f7:f5:c3:0f:f1:83:
                    14:b3:3c:bf:bd:2d:b4:08:be:e2:73:25:ca:fe:c0:
                    a1:ae:4a:52:d5:47:06:bd:f5:e3:e2:e9:fb:28:f9:
                    aa:08:86:d6:ea:78:92:de:d4:bc:6a:b3:f7:8a:95:
                    fe:8a:bf:bd:71:07:d3:82:49:98:d7:28:d1:bc:0c:
                    c0:70:56:c8:3e:63:72:86:95:f9:96:93:60:87:86:
                    7c:b7:98:e0:3b:05:c3:ad:27:6e:cc:ce:50:b8:8f:
                    b6:f0:34:8e:ca:0b:dc:cf:20:4e:5a:6b:62:4f:ca:
                    56:18:63:3e:1e:b9:d5:43:fd:92:98:c3:55:39:fc:
                    21:52:f6:83:ca:f3:79:c3:92:c4:3b:73:cc:5a:78:
                    04:31:20:3e:42:98:f6:4f:fa:ce:f1:c9:23:f3:2f:
                    3f:e0:8e:a8:37:37:49:f1:68:73:56:cb:5a:45:bf:
                    36:54:70:e5:9b:c1:98:f0:c6:6a:0b:0a:62:11:55:
                    53:fb:2b:60:f1:da:95:5a:6a:10:86:bd:b8:91:f8:
                    1e:f8:fd:f0:fd:40:ab:5e:54:16:10:eb:53:73:b8:
                    65:fc:20:46:a6:82:a4:6a:33:ac:8f:fb:e6:57:0f:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:FE:A2:86:7E:4F:B4:70:54:EE:9E:88:D4:2A:11:A2:AE:71:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl

            X509v3 Authority Key Identifier:
                keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:0b:c8:bb:64:71:40:ae:c4:d8:d0:3f:69:f9:34:f8:13:
         52:50:36:1b:fe:c7:e4:00:62:5f:e3:89:d8:bd:b3:c9:88:6e:
         5c:ce:14:10:0e:7c:1c:6b:1b:be:6a:7b:59:96:77:66:15:0d:
         34:58:a5:29:40:2f:04:65:fe:cc:5f:af:a8:c6:47:3f:81:8e:
         01:40:10:6d:f8:33:6e:ac:a5:76:13:aa:3d:bf:d2:05:d2:23:
         4c:ce:5f:ec:c0:42:12:24:39:1f:a4:87:63:f0:fa:67:62:e1:
         30:62:df:e9:57:c7:b1:df:5f:5e:f9:f4:db:df:99:69:c8:0d:
         65:22:8f:5c:5c:ea:17:2c:2a:46:f6:9b:ec:7f:48:66:67:ee:
         4b:0f:64:58:8d:7d:db:93:f6:4d:3a:a3:fc:36:06:b7:7b:16:
         0f:70:13:5c:01:c6:6e:f7:1e:5b:83:04:ff:4c:bd:d0:4f:27:
         bd:31:1c:34:6f:84:89:bf:6b:f8:66:ea:9c:4a:41:33:0f:ee:
         97:a9:49:0c:bb:d1:10:07:e4:9e:cb:7f:b5:77:ae:b1:38:f3:
         14:a1:21:f1:ee:d5:7e:f0:c0:aa:d7:81:28:dc:b4:d1:99:e6:
         ca:88:35:6f:49:3b:ff:18:c4:cd:90:72:69:72:db:75:ac:8b:
         69:0e:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:03 2025 by rpki-client