Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa
File:                     07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa (raw, json)
Hash identifier:          xmOe0asRR02egXYAmkavT1tMGPFryKQHeORL3LH40tE=
Subject key identifier:   9F:0E:53:8D:9A:21:DB:B2:77:AF:18:87:B0:58:EB:30:B3:50:74:85
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B6BC7613C885689EAA2DBC440
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     20115
IP address blocks:        198.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:61:3c:88:56:89:ea:a2:db:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=f31578a4-8314-4619-b256-a81a687b9c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:e6:00:7c:ea:47:72:41:ed:15:b1:22:50:
                    f3:a2:aa:a5:a1:77:39:85:cd:18:b4:35:33:45:f1:
                    e3:5f:48:09:4d:dd:ba:77:63:de:29:2a:b4:cc:ca:
                    a4:5e:f0:9a:46:a8:6e:8f:72:1a:c2:2f:b4:a4:8e:
                    96:f1:aa:b0:ae:06:69:c7:a2:13:48:ee:25:f6:c0:
                    f4:ae:48:91:f3:f8:de:6f:f9:97:be:26:e1:b0:95:
                    24:cd:9e:58:92:2c:bb:fa:2d:2e:a2:a0:20:d5:7f:
                    03:db:a6:8a:48:40:12:d3:6e:a2:52:ac:9c:72:cd:
                    d1:07:7a:c9:05:76:c5:68:41:d0:ac:db:94:fd:df:
                    c4:45:e6:89:39:8d:de:a2:82:99:4e:4a:05:c7:39:
                    2b:bb:09:f2:33:3d:1f:b7:20:20:bb:9f:ee:0c:73:
                    a9:99:de:2b:48:51:53:3d:83:e2:67:bc:bf:b3:df:
                    de:21:24:6d:b2:3e:6a:3f:4a:3e:ef:70:40:c2:29:
                    81:2c:18:55:a4:1c:86:c6:95:d9:a5:58:e5:15:4c:
                    5b:0b:06:dc:fc:41:1b:e7:9f:58:20:8a:9c:13:7e:
                    1a:5f:05:17:51:65:b2:ab:6c:a3:49:84:95:12:3b:
                    78:91:e9:39:1f:2c:b7:e6:3d:99:4e:5a:4a:c7:d9:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:53:8D:9A:21:DB:B2:77:AF:18:87:B0:58:EB:30:B3:50:74:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:0b:d7:bd:61:a5:4d:fc:b0:22:14:58:00:1a:47:32:31:
         f2:f9:4f:ca:f6:b9:b0:c2:58:9a:94:0c:9a:8d:1d:72:2d:12:
         be:a6:28:a1:fd:12:aa:49:b9:a3:66:6e:da:2b:31:f9:10:d2:
         33:fd:68:7a:bf:e5:23:96:f1:6f:9b:97:01:07:a2:29:8e:5d:
         9b:0e:4b:ed:c5:5f:fe:4c:2a:e6:31:a0:37:79:f6:dd:cb:d5:
         c5:94:b9:c1:f1:dd:da:9a:4b:1a:ae:c2:23:fa:79:62:90:c3:
         d4:67:60:87:81:20:0d:94:3a:4c:2a:1e:ea:8d:cf:0d:82:4e:
         0f:6e:f6:10:a9:5b:a6:c7:f5:80:c2:ca:ed:94:46:88:81:fc:
         e8:df:a0:9c:39:00:0d:b0:18:29:dc:0b:1a:19:25:43:2e:b5:
         fd:69:05:c2:aa:c5:7c:f9:44:a8:ed:1a:90:17:76:f7:ba:a8:
         70:9a:4d:f6:74:6d:09:2d:13:62:66:55:0e:5a:a4:be:fb:1b:
         33:55:d4:8a:91:38:5c:09:1a:4c:41:b4:8f:41:5f:af:20:e2:
         9c:fb:79:58:b5:bb:a2:75:5e:9f:58:6b:d2:11:87:e1:06:b9:
         71:c5:1a:d0:f1:75:25:8f:7f:66:44:12:4d:94:63:f5:d9:f1:
         fb:19:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:08 2025 by rpki-client