Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
File:                     742d443f-44dd-3da9-98ba-c84b2553e62a.roa (raw, json)
Hash identifier:          R0Fu8M53L4M0j4WCru8ywSPDAcFIDdBdjw5iKGB4Q3k=
Subject key identifier:   C2:64:50:C4:16:79:3D:C7:D8:68:84:14:7B:44:73:2E:16:EB:CC:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DAC6E374330BA76D01A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        67.52.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ac:6e:37:43:30:ba:76:d0:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=30f2bd20-aca6-4d1a-bc8b-28e6db81bcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:05:70:ff:b8:4d:67:45:5a:91:e2:04:59:
                    a2:52:75:d1:84:79:5b:e5:82:53:77:bb:a8:32:5e:
                    2e:96:2c:93:0e:e9:79:ac:35:e4:06:0f:f3:17:86:
                    40:3c:11:49:a6:3d:b3:30:b0:78:31:43:4c:07:0b:
                    91:30:c3:9c:1d:ce:3f:5b:21:3a:1b:cf:99:1e:d4:
                    be:98:66:04:71:a1:f8:98:cc:ad:e4:ca:33:a8:80:
                    aa:7a:5a:8e:aa:ce:17:b4:59:c2:c7:e0:7a:ed:0c:
                    9c:9a:b1:ee:e7:81:56:3b:3e:18:5d:9d:a0:ba:98:
                    27:7a:8b:0d:da:45:18:1d:3c:99:84:3d:13:9c:e8:
                    66:fd:3d:ed:cc:8e:29:61:d9:9c:dd:8a:5d:ff:f6:
                    14:1e:85:0a:6d:4c:b5:9e:c8:39:a6:2a:f3:2f:1c:
                    b0:b0:da:dd:2a:af:5b:bc:ab:27:16:54:1e:0d:11:
                    28:2f:ae:c1:04:b0:6f:41:c1:cc:e4:df:ea:18:2a:
                    ae:42:12:ed:ea:0d:ca:b2:c5:6b:8e:86:7f:29:87:
                    1d:d1:36:2f:b2:bd:d2:82:e9:ad:af:7e:2f:a4:07:
                    7c:25:fe:34:93:1c:99:72:45:61:94:c0:38:51:50:
                    2f:83:1c:a2:3a:39:92:d4:5c:88:77:d2:3c:3a:ca:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:50:C4:16:79:3D:C7:D8:68:84:14:7B:44:73:2E:16:EB:CC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:68:21:96:c7:52:a9:a3:54:ec:8a:17:08:65:d8:4c:6e:32:
         53:27:fb:d5:a3:f9:91:7d:9a:ec:68:c0:b9:7e:47:f7:63:24:
         e6:1d:6a:49:fc:c7:8d:a5:59:df:4a:ef:0e:c8:cc:8a:70:0d:
         bd:4c:67:6c:5c:43:5e:57:5b:89:57:52:e5:80:99:66:08:c8:
         e0:62:ec:6d:23:d3:6e:ae:eb:3f:0c:1f:7d:8f:4f:98:a5:17:
         01:1e:19:b7:6d:99:95:42:54:b0:2a:6b:20:08:b6:08:4e:92:
         79:fd:37:ca:39:df:0c:c1:bb:ca:19:33:34:8c:3f:41:6e:15:
         49:56:fe:2d:23:f7:45:d6:bc:72:75:db:5a:a0:7a:b9:a0:ba:
         ca:2d:28:53:41:d1:55:2c:69:6b:4c:bd:21:a5:a7:86:a6:cc:
         6a:3c:d9:47:1a:be:57:f2:c7:21:c5:8a:0e:a9:5d:a7:bf:86:
         ee:1c:6b:38:c6:aa:e8:0b:f3:d2:eb:da:8c:a5:fb:c0:bd:c1:
         8f:23:30:d9:a2:de:51:e5:e7:49:48:db:62:93:39:5c:72:05:
         b7:93:98:0d:80:35:75:fd:6f:a7:80:34:bd:47:4e:35:75:f3:
         78:97:f7:ba:3d:eb:0a:34:fb:5b:6f:51:38:9c:9b:c0:3a:3b:
         13:78:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:05 2025 by rpki-client