Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa
File:                     16c01463-1164-33a7-aaee-f347b6f7f7b1.roa (raw, json)
Hash identifier:          Ry0A8Ze2GSB3LWCRFRFyh8E21s8dCZVFAtspfoOBfHQ=
Subject key identifier:   5C:63:C4:38:81:35:79:FF:F3:F2:A0:84:91:65:CF:FC:2A:A4:67:70
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9288DA8D05115DE43180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        72.133.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:92:88:da:8d:05:11:5d:e4:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=cd5709f4-d03f-470e-83f3-f89fbe59dea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:7f:75:8e:2e:a9:08:97:5f:cd:c0:99:49:
                    7e:72:65:ef:10:2b:03:ec:4e:9a:8c:30:af:25:b4:
                    dd:e8:80:46:ae:82:a0:6e:c3:41:85:d4:cf:c5:b5:
                    81:b6:c3:f0:34:a5:5c:15:90:b7:d1:74:1f:35:ee:
                    5e:3f:ab:4a:f0:11:5e:aa:ec:9e:f4:e3:89:4d:48:
                    0f:54:87:39:25:b4:4a:26:36:0e:55:2a:dc:39:96:
                    02:d3:80:f4:3c:e4:8c:bb:aa:75:b8:2b:e1:e6:cf:
                    46:85:3b:70:dd:e0:24:6f:15:19:cb:83:2e:6b:ea:
                    e2:e9:3d:4c:63:c3:d1:c6:e4:45:f9:17:db:f2:21:
                    5a:9a:99:88:b5:11:24:a5:05:38:b8:b2:f9:3a:ea:
                    da:fe:c7:28:25:ff:40:66:b0:d8:52:53:4a:00:d2:
                    ba:ec:7f:1d:ae:09:33:26:e3:ce:b7:5c:31:72:ec:
                    06:db:f1:c7:8d:24:c4:ed:c3:47:30:2f:20:b8:06:
                    e3:5d:61:3e:9b:f7:fb:4f:85:64:84:68:eb:06:d0:
                    12:15:09:0d:c4:eb:79:81:38:93:7d:1e:01:e9:22:
                    be:fd:0a:b9:06:f8:b8:e1:20:90:92:1f:08:70:db:
                    07:a1:eb:09:42:36:89:11:7e:70:71:64:bf:f8:6f:
                    dc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:C4:38:81:35:79:FF:F3:F2:A0:84:91:65:CF:FC:2A:A4:67:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.133.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:d7:21:b2:0e:fc:62:01:11:55:f6:97:af:e2:5d:3f:02:
         52:43:d5:26:e3:fa:de:1b:89:53:2d:55:93:6f:33:ce:94:56:
         5e:74:a7:f5:83:4c:d7:dc:b6:a2:4a:51:8c:a2:b4:63:98:b9:
         78:99:5a:3a:54:ae:c3:62:5f:8d:be:33:14:fd:83:78:1c:9e:
         61:16:48:6a:3f:94:41:a1:51:99:ad:b3:98:b1:f5:0d:2f:b7:
         20:72:ec:0e:9b:42:12:62:74:b4:20:d3:af:dd:ec:07:e2:97:
         2d:3a:1b:a6:f9:72:1f:53:2d:7c:9e:75:5c:82:6d:1f:52:6d:
         64:78:d6:6e:64:16:fa:c2:e2:8e:08:2c:a8:e2:c3:65:8b:03:
         fb:4c:6a:e3:4d:ff:b8:d3:88:05:da:04:de:fd:69:de:2b:38:
         8b:84:89:c2:c2:be:3e:2b:69:c7:3c:6a:7a:07:60:3f:15:fd:
         7f:8c:f1:f0:9b:fb:3f:22:bc:3f:ee:98:2d:fe:d1:fb:e9:ee:
         92:a7:49:6c:63:d5:97:c5:19:25:42:2f:98:ac:03:ce:f1:d5:
         f8:e7:d5:90:7c:5d:07:55:bd:2d:53:5c:61:1d:76:f8:78:80:
         14:20:23:da:5f:6b:26:26:28:c4:6c:0b:a9:71:3b:0f:58:44:
         a8:3c:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:04:04 2025 by rpki-client