Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
File:                     de598f48-d731-346b-a43b-97507f63c750.roa (raw, json)
Hash identifier:          5oueSuStmkuox1Jg8qW8HC1AD8vLmMQscqyZOItQbeg=
Subject key identifier:   85:96:A2:C5:B9:AB:56:D6:B2:0F:A1:27:FB:D1:A8:20:6E:F8:6F:F4
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584B7DECA45007F25BB2A4B74200
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        64.79.227.0/24 maxlen: 24
                          64.79.229.0/24 maxlen: 24
                          64.79.236.0/22 maxlen: 22
                          64.79.240.0/23 maxlen: 23
                          64.79.244.0/22 maxlen: 22
                          64.79.249.0/24 maxlen: 24
                          64.79.250.0/23 maxlen: 23
                          64.79.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a4:50:07:f2:5b:b2:a4:b7:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=ce0af0de-b492-4d59-91c2-2bd8fa6a3403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:c4:ec:d1:fa:22:c3:de:da:63:61:bd:e2:
                    8c:40:63:74:26:1d:d1:da:05:6e:4b:2c:d6:3a:01:
                    44:30:90:46:c5:2f:d9:e3:ff:fe:1b:9a:c8:f5:c7:
                    b5:10:76:d4:60:67:76:d0:d5:92:ee:97:92:b4:59:
                    1f:81:c7:63:63:21:80:49:70:d0:e2:fc:f7:a2:61:
                    14:5e:45:1f:68:26:95:e4:43:fe:33:57:e2:41:86:
                    6c:1e:33:4b:3e:63:28:b6:85:fe:93:2d:c8:80:15:
                    30:98:59:4c:9a:f2:e2:7d:54:f4:9f:b8:76:ef:d3:
                    55:29:d3:da:22:a2:3c:f8:28:bb:29:61:de:4a:c1:
                    34:77:22:b9:6b:b2:2c:84:cf:c2:c3:e5:02:54:c3:
                    49:ce:bb:cb:6b:93:51:54:bf:2c:d3:18:f2:a1:fb:
                    d8:a6:e0:c2:69:a9:5f:4e:68:db:1a:42:fb:2c:54:
                    b0:76:7a:c2:d2:39:6c:a6:a2:42:48:d1:05:61:83:
                    8f:db:10:d8:2e:bd:02:36:b7:dd:a4:b9:95:09:29:
                    bb:0d:ff:d1:c1:56:ab:dc:65:6a:f7:16:48:c0:4b:
                    8b:f3:10:2b:0f:34:00:ab:57:86:2f:cd:c3:0b:f8:
                    a8:fa:fa:db:42:d3:92:53:d1:57:32:1c:31:dc:53:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:A2:C5:B9:AB:56:D6:B2:0F:A1:27:FB:D1:A8:20:6E:F8:6F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.227.0/24
                  64.79.229.0/24
                  64.79.236.0-64.79.241.255
                  64.79.244.0/22
                  64.79.249.0-64.79.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:a7:f1:66:d2:5c:64:50:6a:5b:fb:21:fc:98:15:bb:a6:
         5e:2d:70:1a:20:fb:08:ed:58:5d:f3:a5:b9:21:cb:55:ee:77:
         f3:1e:f1:46:70:b3:ba:0c:6c:9d:8a:c6:8a:a0:dd:09:43:9e:
         2a:28:4a:4b:ac:2a:c2:24:09:cb:8d:30:ae:0b:39:88:36:de:
         4f:0f:d2:27:7d:e7:06:18:e1:bf:97:1c:89:54:d8:82:37:4e:
         1d:f4:89:3e:4b:98:e5:38:bd:01:f9:54:2d:21:b4:80:ce:3c:
         11:f7:9b:59:62:18:dc:9c:fd:84:86:f4:03:77:a3:20:59:60:
         66:16:21:de:4b:57:1f:b0:c2:83:a1:e3:0f:7e:1b:64:e1:66:
         06:da:f9:8d:97:5f:29:9b:5d:5f:fa:37:89:45:61:8c:43:0c:
         ce:b7:0b:f6:e3:db:8a:79:13:fd:68:0c:50:a5:75:2d:b0:65:
         17:9d:2e:ed:9c:fb:47:1a:aa:ce:ad:60:02:d1:b8:6f:64:c6:
         6a:fd:01:35:ac:5a:29:7c:1b:dc:31:24:2c:be:f2:61:d1:9a:
         32:75:71:94:43:d0:f7:51:dd:c3:22:47:3a:35:31:fd:eb:a0:
         8d:b5:f3:2d:70:a3:d6:50:4d:9d:3a:a3:61:d9:94:f9:27:7d:
         04:00:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:45 2025 by rpki-client