Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
File:                     514de8d8-0941-3b05-a299-031e2f9ef5a3.roa (raw, json)
Hash identifier:          1ohvcBQh+VOX6Ouq0Mjk5sJ/v3AG2kmEH7QjiV993Fo=
Subject key identifier:   4C:AB:E8:F3:99:97:E7:25:78:AE:19:91:6B:92:2C:6A:76:AF:59:F9
Certificate issuer:       /CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
Certificate serial:       010D0C9F4328584B5571E056E7CB973B9548CA00
Authority key identifier: 17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     20281
IP address blocks:        66.171.144.0/20 maxlen: 24
                          66.185.160.0/20 maxlen: 24
                          207.7.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e0:56:e7:cb:97:3b:95:48:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=b9e58346-e943-4d36-b508-6fea5810d002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:de:4d:15:db:a5:ef:69:da:6e:a7:9b:0b:
                    49:9e:cf:a4:a1:43:21:31:03:41:fd:24:d2:7f:ff:
                    72:fb:c4:9b:b9:82:4b:53:bf:64:14:83:39:92:0c:
                    ac:6e:d6:60:e4:14:0d:58:d6:ad:2d:35:70:c8:1b:
                    88:7b:67:e7:cb:7e:cf:89:08:12:d4:48:cc:9a:0d:
                    3b:d1:89:57:70:86:bb:1b:46:55:c6:04:e8:95:09:
                    d3:0f:80:25:77:9e:52:3b:55:e2:be:fb:56:1b:ff:
                    5f:b0:f2:a4:4c:16:82:42:c3:15:46:f3:c5:b0:c7:
                    55:17:f1:6e:85:7b:25:98:71:c5:20:ea:93:9e:3b:
                    95:34:7a:de:80:99:45:42:86:f5:6a:1e:5c:0d:f1:
                    0f:93:e5:ec:4c:a3:9f:fa:f8:72:3e:3a:ec:00:29:
                    be:9d:e8:fe:a1:49:10:37:6f:41:9f:bf:ef:a2:63:
                    9a:cb:ec:34:44:d6:51:ee:62:94:5f:e1:f4:6a:b6:
                    48:10:ab:90:a5:72:2f:4e:12:0e:04:f9:a0:3e:82:
                    0f:f7:4c:46:b2:08:7c:19:01:84:d3:4a:15:fc:3a:
                    73:bb:5d:e3:2d:52:76:08:d0:df:d9:f5:a2:41:ca:
                    6f:55:0f:43:45:40:e6:5c:82:d2:ce:4f:b8:38:d3:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:E8:F3:99:97:E7:25:78:AE:19:91:6B:92:2C:6A:76:AF:59:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl

            X509v3 Authority Key Identifier:
                keyid:17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.144.0/20
                  66.185.160.0/20
                  207.7.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:ee:11:70:5e:cb:03:16:7d:13:c4:e2:11:03:f2:8f:40:
         e7:fb:ba:69:a0:bf:3e:73:9c:ba:82:ff:bb:fb:45:ac:61:9a:
         6d:8d:b5:79:a7:6f:51:e1:00:f2:ef:ad:bd:94:74:3a:2a:1b:
         de:9e:20:c1:30:34:fd:6a:d8:bc:af:e9:86:ea:22:a1:c3:ec:
         a0:12:fb:66:58:5f:fb:c5:6f:b0:a6:ab:54:9d:6e:da:a9:b8:
         6e:55:e5:ce:ce:ed:9c:58:6f:f0:2e:09:fd:cc:60:ab:46:cd:
         87:d1:ae:de:67:40:05:f2:86:25:87:4b:03:c3:0f:44:b7:d2:
         9b:d5:0e:a7:56:64:65:5c:28:3b:66:b5:9c:98:a7:b3:6f:f1:
         2a:fe:f0:c2:a0:1d:71:ec:c7:4d:c8:44:5c:d7:59:af:1e:20:
         0f:75:03:ef:b8:cc:6c:ab:98:f4:17:59:fe:d4:27:4f:6b:17:
         49:7e:6f:20:47:ac:29:54:0d:43:d6:14:73:d5:a5:ef:c4:5a:
         7b:be:bd:06:b1:a8:24:3c:2f:38:78:c0:50:e9:a4:3a:10:91:
         d2:0e:87:89:17:1e:2b:a8:5f:f2:3a:72:77:90:35:fd:b9:76:
         f3:d4:38:cb:ca:e2:7d:a1:5a:27:03:28:ee:b7:f2:11:98:47:
         0e:dd:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:07 2025 by rpki-client