Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa
File:                     1493c9ea-7a6a-388b-93df-8b15de964e3e.roa (raw, json)
Hash identifier:          VAvzz6N6V7kuAZlWS8d1mrQvgPVX+khCataDkziy7AU=
Subject key identifier:   61:4C:17:10:BF:D6:DA:6D:82:11:25:CA:AD:C4:18:15:BB:F9:94:69
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B6BC760BF55F2B95854AE5880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     7029
IP address blocks:        198.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:60:bf:55:f2:b9:58:54:ae:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=e2b05bad-aae3-4630-873c-ab83bf9dd542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:26:92:c0:0d:58:1c:08:6c:79:fa:4b:b6:
                    07:d7:a0:e2:e3:ef:71:fc:ae:1d:cf:db:f9:92:46:
                    82:9a:61:91:1f:dd:a5:81:0b:c2:dc:aa:29:c1:06:
                    d3:ec:7d:f0:42:46:0e:64:be:2d:42:d4:a5:c6:8a:
                    e2:a3:f5:68:88:41:55:51:b1:6d:9e:b5:ac:88:f3:
                    2f:88:a9:3f:74:8e:11:92:03:48:42:c9:cb:d9:20:
                    55:23:16:25:e3:82:fb:33:11:bf:f7:63:c3:c9:ea:
                    6f:f9:41:15:07:1e:de:77:e1:b0:45:c1:d5:6c:5d:
                    ba:c0:a8:40:56:38:9e:b5:b6:96:90:e7:e8:35:d7:
                    9b:f7:78:28:b6:fe:af:ca:20:aa:20:6c:8e:5b:7d:
                    8b:ce:33:db:8b:91:8f:43:db:2a:b9:6f:d8:de:df:
                    8d:d4:35:99:f6:ad:ce:e6:e2:1a:23:1a:9f:6c:ee:
                    e4:8c:d7:e8:8a:98:df:e6:64:a8:28:15:c6:90:ae:
                    b5:f2:65:a7:ee:68:a3:14:c3:e9:a3:b5:03:91:0b:
                    c8:28:d3:2b:b4:f9:64:89:49:da:2e:36:ed:75:10:
                    51:61:db:42:3a:48:19:6e:bb:df:87:84:7d:81:89:
                    c6:67:4a:3c:25:0d:2d:c7:20:a9:a1:11:00:02:33:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:17:10:BF:D6:DA:6D:82:11:25:CA:AD:C4:18:15:BB:F9:94:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1493c9ea-7a6a-388b-93df-8b15de964e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:e5:c7:3a:83:88:c0:2c:b2:c7:c0:cd:d0:54:a4:d4:ce:
         7d:fb:02:b2:cb:80:05:e7:61:ef:07:15:42:0b:72:f6:7d:9d:
         6e:68:8c:60:a3:1e:c9:60:89:a6:ce:ea:9d:9b:a3:c7:ef:64:
         6f:0f:8b:f8:83:53:2d:1f:52:22:08:a5:f3:59:8d:e5:97:8b:
         8e:57:e7:cc:60:41:ea:18:58:f7:22:d1:12:dc:5b:e5:a7:64:
         f5:dc:ef:78:97:3d:09:55:c8:79:50:dd:e9:3c:dd:fa:54:6d:
         ab:60:77:19:d3:62:6b:51:5b:e9:4c:63:0b:a0:8e:52:58:3c:
         b4:4c:a2:fd:31:e8:11:6c:c4:e8:c4:75:b3:ca:d6:30:76:07:
         5b:4a:04:f5:17:dc:29:7e:dd:89:b3:eb:64:31:23:35:7b:14:
         41:73:6d:1f:16:de:cc:03:b4:80:ed:af:18:86:05:84:8b:a5:
         f3:d8:9c:d1:4f:cd:0d:cf:6e:ba:19:92:5a:23:74:ca:e1:00:
         e0:ae:6e:a8:c8:ec:ee:1b:ef:0d:7d:a1:c9:b4:59:16:74:1c:
         4a:8d:d5:ea:67:10:af:c2:a3:15:ea:7e:d0:ea:af:34:92:31:
         8f:7c:1b:55:e5:60:b8:3a:ea:79:ca:d2:a0:1e:6f:b5:2b:f4:
         ed:f1:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:11:52 2025 by rpki-client