Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
File:                     44ba4ade-2c64-3fe6-a21e-385033d36313.roa (raw, json)
Hash identifier:          RvEr8LWyTYPDpbADVlxsuGTjwercuFpNZQyDyunAv6U=
Subject key identifier:   91:C9:7B:7F:CB:30:EC:F5:32:34:3F:9F:13:AF:09:DC:AB:BB:E2:E9
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584B68FCAD6D66FA2147A15C1D80
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     5650
IP address blocks:        72.18.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ad:6d:66:fa:21:47:a1:5c:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=db0c94ed-52d7-403f-9a7e-598bb8aa0944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:26:bf:bb:24:51:2c:a0:41:92:14:7e:80:
                    52:0a:e8:3a:20:fd:8c:33:1e:f9:cc:d5:12:40:36:
                    e2:75:3b:57:d7:e3:f6:08:d0:7f:a0:32:86:5e:d0:
                    f3:53:cb:98:21:43:ea:da:b7:bd:fb:cd:f9:03:0e:
                    33:e0:0f:66:9d:0e:24:50:72:4a:3c:16:65:bf:3f:
                    d9:20:54:0c:c5:a0:f1:21:d9:3b:bc:c6:6b:8a:4a:
                    82:fb:01:13:ef:bb:43:18:e3:25:d0:47:9c:12:61:
                    c3:0d:b2:55:ca:28:6f:55:5b:44:88:75:43:fe:32:
                    13:02:68:ae:94:01:c1:1e:09:43:09:87:6e:bd:e0:
                    f7:ef:ee:ca:18:b6:59:13:c5:92:ee:2e:e8:09:8c:
                    d5:81:d0:ea:71:6c:b1:c8:6f:a4:51:ea:7d:fd:1f:
                    6b:f0:df:e5:ba:17:9b:02:a9:39:37:37:d8:fd:ca:
                    2d:b5:71:4b:8c:c0:bf:25:9f:e6:ab:35:9d:61:37:
                    8f:2d:c2:2b:d9:f4:a4:51:15:23:76:0d:60:09:d2:
                    73:bb:e7:5b:29:6d:2c:b3:fc:4b:b7:04:c7:db:45:
                    92:01:33:a1:9e:3f:80:1a:1b:6d:52:5b:a3:95:5c:
                    bb:ec:76:5a:1c:41:e8:2e:3b:f7:68:ef:38:dd:62:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:7B:7F:CB:30:EC:F5:32:34:3F:9F:13:AF:09:DC:AB:BB:E2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/44ba4ade-2c64-3fe6-a21e-385033d36313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:85:d8:75:bc:e9:ad:07:d1:c5:29:b1:84:73:29:4a:cb:4d:
         b5:c4:80:db:8a:87:36:c5:9c:2f:3b:58:c2:d1:86:a7:b1:43:
         3d:df:79:2c:1b:25:d4:0b:5f:70:84:2a:9b:ed:63:e4:cf:e0:
         84:8f:86:74:df:6a:f7:dc:30:19:f9:22:5c:80:6e:49:5c:29:
         6f:0c:79:98:fe:83:a5:fd:d2:d8:b5:84:5c:f2:b0:93:ec:b7:
         79:3a:bf:9d:88:95:1b:32:de:59:89:47:9c:06:e2:ff:8d:e9:
         cd:53:be:15:c1:fd:86:0e:2b:95:73:78:2b:a8:bb:76:cd:e8:
         5b:5f:8f:7b:d1:55:e8:2f:b4:5a:21:52:f0:b2:98:b4:77:7a:
         17:08:cd:5c:5d:03:da:de:1b:1d:8d:08:63:51:b7:79:ef:23:
         26:30:4d:3d:a5:80:f0:70:3d:09:be:c1:25:25:53:f8:b9:08:
         35:25:88:00:3b:f7:6b:b0:2f:0a:ee:76:26:e8:fa:f9:cf:cf:
         92:ad:b8:0d:cd:91:31:aa:71:9d:d7:9d:1f:be:ff:19:97:48:
         1b:c8:6f:86:91:5f:21:e2:ce:8b:ec:2c:fe:ec:bc:55:14:75:
         fa:b1:ee:8e:d9:79:69:df:c5:6d:dd:2a:cd:ee:5a:03:4a:e6:
         2a:67:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:38:08 2025 by rpki-client