Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a849d385-b490-3e04-a12f-dc973e676ebd.roa
File:                     a849d385-b490-3e04-a12f-dc973e676ebd.roa (raw, json)
Hash identifier:          G7sEs1f+mkAPj88EJpUz0uhSTUDwGBN1l0abRS7JC8I=
Subject key identifier:   90:16:02:8A:61:E9:5F:B6:54:92:11:BA:C8:7E:25:30:5C:E9:FE:9E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D99A05813C862ACBE5780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a849d385-b490-3e04-a12f-dc973e676ebd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        67.53.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:99:a0:58:13:c8:62:ac:be:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4437f222-74aa-4fe3-ae00-7d164a3d44ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:d7:80:8c:69:71:c3:af:5d:e8:06:16:2b:
                    66:74:da:ac:65:38:ed:a7:5f:5d:2a:ea:5e:92:f9:
                    43:4b:9b:07:4e:b6:94:e4:da:f1:d6:89:4b:9e:4d:
                    e8:de:46:93:8e:f6:0c:e7:8a:63:2b:9b:c1:b8:a0:
                    90:0f:c7:16:76:19:ca:7c:b2:60:5e:ea:e5:7a:bd:
                    0e:22:e7:3f:ba:f6:ae:55:0c:1c:08:8d:ff:8b:70:
                    fe:7d:e8:98:0c:e3:d3:a2:85:d1:d8:e1:17:82:cc:
                    7d:a1:ad:06:fe:c8:18:5f:ce:22:e7:d0:13:68:dc:
                    7a:46:63:19:0e:c9:14:90:12:ab:ce:4b:68:1c:0b:
                    8b:7c:95:3c:8b:05:22:98:8b:be:86:34:38:9b:3c:
                    2e:00:d1:89:61:53:79:af:a1:2b:a3:07:a3:86:29:
                    49:e4:e2:51:7a:9f:50:4f:a9:bd:d3:2a:3a:3e:3c:
                    99:bb:07:8a:0a:3d:96:3f:30:26:cd:60:82:df:f4:
                    28:4d:04:d8:b7:b5:f1:04:5b:5b:f4:75:f4:e0:bc:
                    69:8d:9b:18:e4:91:76:ca:40:dc:e6:ab:e8:b3:57:
                    b0:0d:f0:4b:1e:84:c6:d4:27:5c:16:87:f4:64:6b:
                    53:84:61:ff:ab:7c:44:7e:22:11:0f:bd:7f:ff:64:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:02:8A:61:E9:5F:B6:54:92:11:BA:C8:7E:25:30:5C:E9:FE:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a849d385-b490-3e04-a12f-dc973e676ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:10:53:9b:b4:8f:d5:6b:76:d1:77:a4:a1:06:de:66:ec:
         4b:b4:ee:31:ae:71:f1:e5:a0:4c:e0:b1:27:35:ef:ab:a1:2f:
         d8:af:b1:e2:e7:1a:fb:26:6b:95:24:39:fd:f2:f7:58:a6:38:
         a5:e3:fc:01:44:3b:11:41:70:f6:9a:99:3f:fc:67:18:cc:d5:
         3d:c6:fb:81:a6:8f:1f:c8:21:bc:52:df:27:5e:f8:12:17:84:
         b9:fe:41:42:59:b3:c3:9d:65:0f:75:f0:99:63:fc:89:45:55:
         b4:4f:e8:45:ab:01:e1:5e:64:cc:eb:3e:76:38:19:d4:9e:7c:
         f9:fa:3f:4b:fa:d0:ad:d9:e5:83:f1:97:12:52:89:3a:50:e5:
         8e:05:50:d0:3a:65:11:6e:f6:e6:fb:b2:b9:92:0a:fb:ef:27:
         dd:92:d2:1d:c5:c7:08:c3:42:71:5c:7c:f4:06:f9:86:43:f7:
         f9:ab:54:d7:cd:81:e7:0a:f5:19:ff:0e:4a:3c:dd:4a:4f:aa:
         ad:2c:18:53:77:80:81:88:ad:f1:1a:da:ef:79:4e:20:9d:ba:
         9b:ac:32:7d:86:eb:86:54:ba:c9:ae:f5:ee:f5:a6:77:7b:30:
         b7:61:b1:dc:de:6a:71:d3:68:4e:8a:12:2e:cb:f0:64:dd:17:
         9d:5a:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:41 2025 by rpki-client