Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa
File:                     3fa23ab4-145d-3e7b-afd6-df95d163136f.roa (raw, json)
Hash identifier:          vFGqRN8lGASbuGb8zbgluBSbkSfCnVDWQwE2Zcpja9A=
Subject key identifier:   90:DC:47:60:5F:11:B9:FE:76:29:B2:DA:79:27:34:5B:F5:DB:13:4F
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B3986FD6F84E8B8BFFD398380
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     52129
IP address blocks:        66.159.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:86:fd:6f:84:e8:b8:bf:fd:39:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=e4d68c82-033f-49da-9222-fe3fc83971ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:5f:50:3f:c8:5b:1a:f0:c8:9c:c4:11:2c:
                    fc:d1:2c:8d:ea:c2:d9:14:2d:76:73:6f:b9:f4:8f:
                    29:ca:0b:08:0e:1a:d2:44:7f:a7:01:40:79:0c:bf:
                    13:41:c1:6e:97:b3:a6:48:8e:86:c7:69:0d:bc:6b:
                    ee:6c:7b:0b:dc:c2:3e:d2:15:d8:d2:85:fa:f8:e6:
                    95:d5:a9:de:bf:3c:5d:b9:f2:d0:d8:b6:1f:18:76:
                    49:c5:32:66:3f:51:f7:d9:12:6a:9f:f2:44:c3:61:
                    5d:65:07:eb:c4:01:da:2a:e4:66:15:59:6a:0d:a0:
                    3d:23:5e:32:d0:2f:e5:df:f9:93:c1:a3:39:64:46:
                    d5:c3:07:d2:4f:e7:98:c6:d3:85:3a:0f:85:ce:bb:
                    ea:cd:fb:92:e5:ff:22:a3:f0:cc:52:2f:0a:b9:cc:
                    96:34:44:bf:6e:0c:9b:ca:2c:c2:8a:79:9f:32:fd:
                    94:24:7f:2f:77:57:7e:aa:21:c9:c7:10:49:bf:57:
                    64:57:f4:18:ca:d8:b5:e5:a2:5a:3f:6d:7c:91:d7:
                    0d:85:fa:8d:8d:f1:9f:69:45:7a:1e:4d:79:2f:b8:
                    ea:e0:e9:d9:a8:7c:1c:b9:0c:6e:fa:b6:0c:6d:e9:
                    f8:ab:b0:ea:f3:3d:7c:c3:34:46:29:96:ec:6e:9e:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:47:60:5F:11:B9:FE:76:29:B2:DA:79:27:34:5B:F5:DB:13:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/3fa23ab4-145d-3e7b-afd6-df95d163136f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:3b:cb:07:01:45:9e:da:8b:33:4d:a3:58:a7:64:e0:24:
         3e:c1:ba:bc:b8:ed:84:85:97:96:d5:11:28:d2:01:23:5b:39:
         49:d9:25:39:0a:17:de:30:e5:33:88:59:7a:3a:b0:15:79:aa:
         70:12:31:d8:df:77:7f:5f:4e:22:f4:7c:80:bb:21:d6:bb:56:
         6f:8a:78:25:f0:10:46:64:c6:29:66:8d:d8:c5:6a:0f:c0:e1:
         df:76:9b:e4:9b:30:f0:1d:98:97:0e:34:d9:6e:ae:e8:d2:1a:
         2a:c8:c6:4c:3f:5f:e2:0b:0e:ea:01:a7:a6:98:4f:9c:f7:bf:
         98:8a:9c:2a:6d:99:a2:ee:5f:12:a7:74:78:91:28:05:d5:86:
         65:c7:47:72:1c:8b:bc:32:66:13:6e:5e:d4:45:cc:e9:76:77:
         31:46:75:08:ce:6d:4f:32:3c:84:a2:da:33:84:12:70:45:f4:
         f9:78:42:f8:f4:86:84:5c:b8:ac:53:23:79:52:94:a6:19:8e:
         6a:79:2d:59:f6:55:ea:dd:86:09:e0:77:c2:a7:ca:f6:0b:6d:
         53:07:4b:b9:fd:ee:04:c5:ae:bc:b6:ac:c5:2b:13:50:ba:43:
         e9:12:d3:85:bb:4d:9b:a0:2e:a8:b2:3f:95:1f:e9:f3:9e:19:
         a3:01:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:13 2025 by rpki-client