Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa
File:                     4d27f777-ac63-385f-a971-b017fca91aaf.roa (raw, json)
Hash identifier:          EuMPiFbWQl2E3o3kLT/VeSOq7ErbBLhmn51Y/Y4BbAw=
Subject key identifier:   F2:9E:A9:43:DE:D8:6A:0D:03:AF:B9:8A:EA:81:F8:94:A4:63:53:FE
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584B80B77F68C368BE295D8A2E80
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     6994
IP address blocks:        66.54.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:7f:68:c3:68:be:29:5d:8a:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=05f9453c-bc6e-4e2f-afbb-b3a9e851b357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:ba:2d:23:b7:79:75:3e:a2:71:ff:ff:e4:
                    ad:32:18:ae:4d:49:db:2c:4f:bf:a6:13:cb:e4:23:
                    08:91:8f:ba:52:80:f7:b5:a4:99:80:85:94:37:3e:
                    e0:d4:6d:92:e6:08:84:c3:97:22:12:ce:2c:86:e8:
                    e7:91:b4:fa:a7:b1:bc:1b:fe:dc:e4:b9:77:32:9f:
                    59:95:b2:2e:bc:6e:c9:b8:a5:a0:53:6f:78:8e:c6:
                    e7:da:e8:a2:37:97:19:d9:e4:2e:aa:21:8b:e2:e0:
                    85:7a:64:9b:18:42:2e:f8:9e:49:60:6c:a8:2a:cf:
                    73:ea:0f:fe:c0:6b:d3:17:a6:2f:bf:f5:95:61:db:
                    9a:a8:d8:38:e1:f4:f7:65:e7:7b:c7:50:e7:12:f3:
                    78:10:cc:f9:f6:fd:56:65:11:65:fb:40:a1:fd:aa:
                    36:e1:c2:b5:c3:d6:d2:65:8b:18:e6:6f:95:7d:77:
                    1f:0f:34:20:6c:4a:31:64:cb:92:6b:30:99:31:8c:
                    55:c3:6e:21:f7:d1:17:b8:a9:89:69:96:7f:5e:81:
                    bc:86:e1:34:5c:66:a1:19:ed:22:8b:cd:b3:f8:fa:
                    36:66:6a:ab:51:74:fe:46:ae:d3:4e:9d:61:db:cb:
                    cc:96:38:f8:17:ce:66:9a:72:9a:c2:51:ac:7b:fe:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:A9:43:DE:D8:6A:0D:03:AF:B9:8A:EA:81:F8:94:A4:63:53:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/4d27f777-ac63-385f-a971-b017fca91aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:d2:ad:f1:c0:ad:76:14:d0:43:35:58:d2:66:bf:64:e8:
         ac:80:dd:55:d8:bd:71:a6:81:12:b8:03:1d:73:3b:22:cc:be:
         f2:cd:95:c8:2a:89:da:52:7c:d7:89:fa:17:43:d6:78:33:75:
         11:7a:aa:91:83:4d:3e:a5:c4:94:58:c6:e8:55:ef:3b:f2:ad:
         cf:5d:63:fa:ea:89:e2:a4:6e:27:f8:c8:b0:f8:60:96:2a:00:
         f6:f3:49:70:7f:a7:9e:c0:24:24:f9:fa:ef:71:0e:73:ce:19:
         8f:55:be:88:16:04:76:1b:21:65:ec:41:5f:ce:0a:05:5d:6b:
         8f:d6:d5:d3:76:86:e7:c6:c1:c2:93:1d:72:f1:79:64:55:f4:
         05:70:ec:c4:c7:7d:e5:34:61:7a:b0:48:e1:c0:bd:fc:bd:66:
         b2:48:f4:85:de:0a:c5:23:91:45:3f:08:54:c2:ed:ed:6a:06:
         b7:80:e6:cb:76:5e:3c:ff:3a:b7:a3:94:15:93:1f:e1:0e:12:
         e1:34:04:45:00:55:b1:99:3e:65:d9:7d:4d:a6:a1:50:0c:ca:
         e7:f7:54:6c:5d:ff:0e:4b:64:fc:13:80:e6:2f:d3:87:b7:97:
         bc:20:be:dc:ef:c7:b2:fd:0a:19:6e:80:56:12:5c:e0:83:49:
         00:6b:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:21 2025 by rpki-client