Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa
File:                     33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa (raw, json)
Hash identifier:          jIR35S7djx0bIN2HTZTl0T4uHfyDdIPFwaQQ1MYoPUc=
Subject key identifier:   A1:9B:75:AF:5F:23:1D:6C:73:09:BF:D8:A2:35:9D:DA:CE:39:E5:44
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584B76F25D1CA1E8F7901AE1C080
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     174
IP address blocks:        65.166.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5d:1c:a1:e8:f7:90:1a:e1:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=7a3e242e-bc0a-44bb-8766-e0ea4940e39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:ff:fc:0d:35:16:33:da:3d:64:ef:d9:03:
                    16:fc:82:03:6a:77:18:8e:f2:2c:1f:14:28:c8:2f:
                    de:6a:f4:3f:a9:00:fb:59:54:f5:32:4b:db:f0:f2:
                    30:88:29:14:2c:d9:04:88:b4:ed:7f:75:14:85:9c:
                    47:5f:6d:77:8a:8b:50:b3:1b:17:d0:b3:47:b5:0e:
                    88:b8:61:97:97:95:0d:a8:3f:25:1c:55:ce:25:83:
                    85:76:0c:62:a4:bb:76:1a:b1:38:92:a5:da:b6:c3:
                    17:c6:ba:96:2b:ca:03:47:67:f8:77:ed:3a:3f:59:
                    0e:ff:d6:0d:2c:40:bd:2b:ae:71:e9:60:27:52:a3:
                    ff:fd:d8:91:31:1f:82:09:21:0c:a3:d6:82:bf:20:
                    f2:67:cb:8b:1d:67:a8:9a:8a:59:f8:72:14:d2:7a:
                    26:41:e0:72:76:d9:fd:a0:f2:bc:c4:ab:97:86:30:
                    1b:6d:bf:82:1e:c5:6a:55:c5:fb:0f:eb:03:5c:f7:
                    6e:e3:b0:75:15:dc:19:91:b0:ff:25:d8:67:07:95:
                    74:20:21:c9:79:74:ae:dd:6c:88:4a:3a:9c:a1:13:
                    34:19:35:50:fc:c8:f2:11:e4:08:6a:ac:f5:f6:70:
                    8b:ff:ec:d8:7d:ca:90:c0:64:0c:a6:c8:c6:9a:3d:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:75:AF:5F:23:1D:6C:73:09:BF:D8:A2:35:9D:DA:CE:39:E5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/33c79d0d-bfba-3e9f-a314-6eab16fd4d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.166.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:60:da:3f:01:a2:5f:55:b0:38:64:23:9a:1d:12:68:e4:74:
         01:7a:4b:6f:4f:fc:29:0e:b3:28:65:ed:3f:f0:46:52:2a:47:
         87:7f:0f:75:db:3e:a1:70:84:78:9c:f4:25:ef:81:6b:77:2f:
         46:55:e9:98:31:93:31:9f:4e:02:8d:aa:6e:a1:ab:68:51:b3:
         b9:55:5d:a3:41:6b:2d:f5:7e:41:d3:02:2f:5e:f7:63:93:77:
         e6:e2:a1:d7:2a:ec:87:9e:f8:94:9f:0f:32:bc:e3:a2:b9:f8:
         12:e1:83:84:57:df:93:c9:2f:62:c2:ca:53:1a:25:45:69:de:
         58:d4:33:2b:c5:b6:67:aa:de:b6:38:c7:ed:4e:fe:45:0c:e5:
         48:e9:d7:0f:4b:03:48:53:a9:7a:96:1e:18:df:f5:01:f1:1f:
         80:35:a9:b4:00:ac:3a:1e:27:89:13:5c:ad:ab:a7:cd:f5:ce:
         df:d6:33:02:d0:66:0f:e6:ea:0d:b5:34:f2:27:c9:4c:db:d4:
         9d:ba:1e:1c:ca:08:b6:e6:e3:6d:f0:65:51:61:53:67:3e:af:
         a2:d6:13:a3:01:52:66:af:f5:55:47:52:6c:ac:68:fe:91:d8:
         e4:e2:12:f4:d7:36:96:b3:48:ed:ff:27:96:4e:6d:74:61:40:
         9b:c0:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:49 2025 by rpki-client