Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
File:                     74fee4a1-6d1d-3384-befc-8936e91b742f.roa (raw, json)
Hash identifier:          o30rJ789SGNk/RluG6j+Yb3jSnMrR5ykyPe+OsdLN4U=
Subject key identifier:   92:AE:C3:97:32:52:29:F5:BA:CB:FF:01:A0:57:97:D6:EA:1F:2A:76
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B891773EFD68BFF74EC229280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     25899
IP address blocks:        208.70.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:73:ef:d6:8b:ff:74:ec:22:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=a3494dff-55f7-4f60-9770-1dff7eebecce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:29:af:57:cb:91:be:6e:16:22:59:f6:72:
                    fa:57:d5:16:ff:be:97:3f:d0:37:d6:a2:89:d7:b2:
                    a8:65:a1:92:f5:63:12:86:29:30:5d:8a:79:24:2d:
                    74:a3:3c:1d:da:b7:6c:d2:52:c2:fc:61:cb:7b:5e:
                    f4:70:72:24:a8:91:15:e7:88:3f:ed:57:bf:76:2a:
                    7b:ac:e1:6e:63:f6:98:e4:df:00:1e:1b:41:01:6a:
                    f6:c7:b7:8c:ba:4a:b3:58:f3:1e:5c:5f:e2:05:67:
                    eb:0b:39:60:be:01:89:1a:52:42:37:e2:45:9c:32:
                    3a:6a:25:55:27:5a:16:0a:0f:44:04:a7:33:09:57:
                    8a:6a:c7:99:44:54:a2:30:63:c4:57:4b:cd:34:25:
                    a3:d0:51:dc:6b:61:51:f1:7c:76:10:6f:e7:9f:97:
                    42:4e:de:08:5c:4b:cd:fc:18:8a:f8:ab:a0:28:09:
                    50:04:93:02:96:f7:d4:65:3b:7f:0a:e5:05:74:52:
                    70:f4:9a:9b:08:be:5a:98:f5:25:50:27:50:db:57:
                    fa:1e:2f:8a:d5:a2:9f:1b:90:b3:3a:ec:29:30:68:
                    64:7a:1e:d1:b8:2b:4d:05:24:12:e2:f2:85:30:47:
                    b4:ad:be:55:09:2f:ce:4d:01:a7:0a:4a:8c:b6:e7:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:C3:97:32:52:29:F5:BA:CB:FF:01:A0:57:97:D6:EA:1F:2A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:d1:16:08:15:5d:2d:5e:65:46:ff:6b:6c:d0:4f:48:fc:
         f4:bc:1f:f8:99:de:d3:48:90:45:d3:1e:97:57:67:e8:e3:c0:
         55:25:bd:66:7e:a8:d9:08:f0:72:25:d8:b3:9e:a4:46:35:ae:
         f6:19:df:9d:f9:4f:39:49:1d:39:6e:83:52:9d:b5:b0:4c:d4:
         d9:41:09:6d:93:ce:ee:51:69:eb:20:6d:67:bb:5d:9e:c8:32:
         42:97:e4:e5:4c:f9:66:d3:82:2a:3e:50:b3:49:43:90:23:17:
         aa:86:93:db:a9:2b:5c:3d:6f:35:21:16:08:0e:95:f3:90:e0:
         38:ca:1d:90:a9:61:b8:fd:26:87:a9:ed:b6:36:e7:11:20:bf:
         e4:06:0d:40:06:fd:8c:52:50:34:1a:0c:57:ff:d8:7a:c2:26:
         00:3c:a3:3e:40:fc:79:ff:3a:c6:d7:64:c4:97:0d:82:ab:5f:
         1c:78:71:43:14:e8:cc:a7:14:8b:58:b8:f2:f3:b7:0a:82:f9:
         82:e2:94:14:ab:86:ce:54:91:87:4a:1e:72:86:3c:29:0e:da:
         d2:7f:89:46:6c:26:94:7e:4e:08:fc:1b:9b:1d:44:1e:fb:f6:
         2f:2e:49:c5:5d:40:c1:9d:f7:b0:b2:ad:b7:60:44:41:a3:37:
         ef:6c:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:03 2025 by rpki-client