Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
File:                     35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json)
Hash identifier:          6+r2SFwFIC43DBhgpiDDBKN/a13uqaWwYROeT6WGO00=
Subject key identifier:   93:4F:50:69:48:0B:BD:93:7A:26:30:E5:69:97:56:7F:AE:9C:12:FD
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584B8D477988215F7409837F1C00
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     15830
IP address blocks:        64.112.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:79:88:21:5f:74:09:83:7f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=c4cf4add-8166-469a-a6ed-a2550e46b104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:49:68:07:44:2c:23:ba:bb:d3:f1:a1:a8:
                    36:29:66:d5:d9:ad:a4:9c:86:a8:b3:b5:c3:a2:f8:
                    fd:e3:01:33:b8:91:e4:d9:d8:9a:e3:aa:9f:ca:3e:
                    de:9d:5a:ce:2e:33:13:64:10:de:c6:9e:d0:5c:24:
                    7b:73:f1:18:be:df:28:96:81:86:5f:77:db:d9:6c:
                    bc:d4:8d:e9:8b:fd:81:f8:db:95:1b:0d:a4:4f:9d:
                    9c:a5:5a:81:02:5a:6b:26:8c:67:42:9e:7d:2d:54:
                    3d:2b:7d:16:e4:83:04:31:95:b2:b2:e3:6f:db:ca:
                    78:8b:cf:25:95:e6:30:71:52:e9:a7:1d:ce:ae:87:
                    c6:4a:12:c5:ba:98:26:b3:a9:99:e7:87:f7:03:ee:
                    6e:3c:77:79:c5:8f:71:93:0a:b0:a8:d3:a3:aa:ce:
                    61:c2:bf:12:58:42:b6:2b:99:20:de:95:56:0b:6e:
                    23:41:c7:aa:57:e2:82:20:3c:2b:4f:1b:89:7f:06:
                    d3:91:93:ba:c2:aa:2b:2a:bb:31:53:d6:66:27:94:
                    07:d6:7f:59:f3:5c:b6:a4:a3:a5:b3:89:b6:1e:35:
                    79:c3:c2:15:0b:95:fb:ee:1a:67:4a:f3:92:c2:7e:
                    48:97:1f:77:cb:70:e8:02:06:71:93:b1:5d:b5:8d:
                    16:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:50:69:48:0B:BD:93:7A:26:30:E5:69:97:56:7F:AE:9C:12:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:d4:c0:ba:04:fa:d5:15:b7:57:a5:c1:71:39:f0:07:b7:
         ec:45:5f:d0:79:40:eb:d8:c7:ae:d8:0e:4d:ff:1a:e8:2b:83:
         b5:c7:4b:35:23:6b:9e:ab:ba:41:7a:c4:42:68:47:05:40:54:
         58:ef:7e:2f:db:11:08:e9:a1:94:0d:46:8d:d2:39:22:10:c9:
         2c:ec:69:b7:46:1e:4b:f1:03:63:91:13:57:18:87:25:d2:1a:
         71:7a:fd:0e:c6:2b:38:4d:d0:d9:fb:2a:6b:99:e6:57:97:a3:
         6f:75:01:22:f5:72:f3:b4:bc:96:80:9d:ee:dc:05:d9:b7:19:
         b5:7a:7e:db:27:dc:e3:8d:4c:b3:f6:0c:e2:ac:74:d5:25:0f:
         ea:43:99:4e:69:94:1b:7b:98:06:b4:65:28:2b:97:92:0f:de:
         fe:aa:83:6e:a5:da:4d:bc:8d:b6:23:45:4d:99:68:10:f8:b2:
         5b:5e:fa:71:1e:69:98:f1:43:83:f0:2d:7e:2b:52:6b:5f:7a:
         9c:17:9c:ef:82:88:d6:4f:6d:39:7b:f2:77:61:0e:af:5a:1d:
         24:f0:44:24:4d:1c:9c:82:e0:94:0f:cf:8a:5e:07:0d:24:6f:
         9a:41:b5:48:d1:a4:63:41:49:82:97:97:57:63:92:1d:4b:b2:
         11:3b:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:38 2025 by rpki-client