Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa
File:                     c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa (raw, json)
Hash identifier:          DvojGWkpbyLwY7MHr4N369TmWwfQBAdrj1BlpZKwEv4=
Subject key identifier:   BD:AF:7F:00:E8:53:CB:FC:01:03:26:BE:66:AF:6F:74:A5:64:AC:95
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584B84E769C4914D3D975975E540
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     174
IP address blocks:        63.171.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:69:c4:91:4d:3d:97:59:75:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=8d3608e3-6a12-4270-829c-e007502a7089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:a0:ff:2d:76:b1:74:9e:e1:3c:84:b1:36:
                    4c:c2:77:cc:25:3b:ee:d7:2c:bf:5f:09:1f:18:8f:
                    65:c6:01:11:cf:d6:bb:cb:39:17:95:5f:e5:7f:9f:
                    ec:9a:38:92:57:27:b5:79:b2:fc:c4:28:74:b2:f0:
                    86:a1:00:dc:02:01:0d:83:14:cb:b4:41:e0:14:54:
                    38:90:91:f8:d2:aa:8b:58:24:f9:69:90:c1:82:2f:
                    1b:bd:1f:6a:c6:b9:8c:26:31:fc:39:93:f4:56:6e:
                    a3:2a:63:da:0e:4f:8f:12:06:b7:21:c5:85:9d:28:
                    34:fe:b9:17:8a:f0:cf:e4:1f:c7:4a:4d:26:9b:39:
                    0d:1b:2e:6d:93:38:ea:57:e7:d7:df:36:c6:10:85:
                    ee:ea:1c:fe:99:ae:3e:eb:6f:59:5a:60:ff:2a:33:
                    97:7e:eb:3c:f2:40:1f:0e:f0:20:a6:57:9f:2b:2f:
                    11:21:be:f8:6a:54:3d:9d:76:e8:77:8f:30:cb:1a:
                    a3:bc:8a:df:8e:64:e6:d8:12:67:ed:b3:da:26:25:
                    8f:67:1a:7d:09:6a:6b:0b:ac:6c:49:a7:e7:d0:4c:
                    14:ba:e8:ec:59:74:6a:31:9a:33:3c:e0:fb:7f:a9:
                    70:ea:28:93:20:c0:3f:eb:88:a3:08:1a:cc:76:37:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AF:7F:00:E8:53:CB:FC:01:03:26:BE:66:AF:6F:74:A5:64:AC:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.171.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:23:67:18:d4:5d:69:0d:0d:a7:27:2f:55:f8:f5:47:d0:
         67:b6:4d:fa:60:29:80:3a:d9:e5:f3:d5:ff:81:77:00:5e:1a:
         38:cb:33:3e:25:ee:c1:06:8a:03:93:f4:26:84:97:36:4d:db:
         c0:0f:b3:b8:3a:44:14:1e:a8:2a:51:84:35:0c:1e:88:b8:a8:
         cf:ba:34:ac:41:50:5d:0b:4a:88:3f:59:93:da:bb:d6:a0:8b:
         45:85:8e:80:6d:f3:b9:de:3a:e9:41:5d:65:c1:26:9a:cb:d6:
         5c:ca:1d:77:c7:09:64:a5:8c:0a:36:5b:a3:9b:d9:6e:78:26:
         23:7b:10:98:d9:73:f7:c9:44:72:c0:16:1f:84:c1:df:57:c5:
         01:49:b6:b8:f8:d4:7c:06:54:33:c4:df:d3:ff:36:da:8b:5c:
         12:04:e9:53:47:88:56:d0:62:f5:8c:c1:c2:6b:22:df:a7:48:
         0d:ea:35:24:32:dc:2d:4d:58:d1:6b:da:ca:78:1d:26:a5:94:
         06:e2:81:74:22:bf:a5:e2:15:60:50:90:d8:c1:e3:46:6c:56:
         29:a9:ee:80:b3:1f:6c:d7:a3:5a:59:f1:3e:69:b0:84:ca:27:
         dd:69:bb:59:f8:6c:4d:21:40:e4:88:ba:bb:50:8e:37:0c:4b:
         25:52:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:08 2025 by rpki-client