Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
File:                     ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa (raw, json)
Hash identifier:          Sc7qDPLRPzK9DRjlDK2wCu6XGGmb7i5fDR5ky7q8VY0=
Subject key identifier:   DD:E9:54:A7:49:12:74:A9:3B:E8:7D:5D:F7:8F:C5:0F:A9:80:D1:6B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D1A8A264F21B984E6EA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        68.207.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:1a:8a:26:4f:21:b9:84:e6:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a67f9feb-3d97-41bd-a619-2eaa715a50f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:21:76:61:41:62:13:48:dd:4c:ab:f5:0d:
                    cc:e3:4b:87:4d:02:dc:fb:af:86:b5:df:f7:88:06:
                    96:58:06:6e:21:12:33:ec:3c:ce:1f:ad:c0:9b:1b:
                    ac:f7:28:eb:7c:75:f9:ec:45:e8:1c:f7:cb:f9:12:
                    1f:47:0a:25:2b:c5:9b:e9:bb:29:da:24:5d:35:ad:
                    ab:d2:6e:fb:ba:4c:43:05:e0:8a:1d:1d:5e:ab:c0:
                    53:92:06:f0:67:b0:8c:31:62:5a:0d:bb:b6:5d:1f:
                    0f:77:d6:d0:4c:7d:e5:9b:29:c4:d7:db:25:d7:d5:
                    48:07:d9:1f:8c:17:15:c1:34:a4:83:58:87:a8:71:
                    e2:90:f2:d9:eb:61:07:5e:0d:47:2b:69:88:2e:ce:
                    d2:a2:11:a9:06:f2:13:44:0e:02:9f:e8:d8:8d:7a:
                    f4:0d:72:77:3e:d6:ff:29:ac:85:aa:8c:b3:31:9b:
                    24:7f:83:50:41:31:ed:9f:31:57:48:32:5a:8c:46:
                    ea:b1:87:6e:62:4f:73:fa:f5:1a:ee:02:d7:0a:96:
                    03:5b:37:36:dc:ce:d2:86:85:5e:54:29:49:6c:4e:
                    ab:ea:ff:1a:a3:45:1e:d0:2a:74:5a:31:f9:5e:6b:
                    28:2e:f2:39:b1:9b:54:54:c2:ce:4c:d1:39:fa:1e:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E9:54:A7:49:12:74:A9:3B:E8:7D:5D:F7:8F:C5:0F:A9:80:D1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:c6:c6:dc:1b:6e:37:6a:35:33:3b:b5:07:7e:e8:31:f3:
         ef:bd:47:f1:05:54:0f:90:21:b6:b4:cb:32:c4:46:85:ad:04:
         4c:7c:f5:ea:80:47:90:33:b5:4b:7e:56:14:85:8c:9f:46:40:
         9e:d6:5f:42:0b:87:9e:c3:bd:fa:50:97:9f:88:44:ca:24:be:
         c6:33:c4:c2:cd:9c:91:71:53:e0:ee:df:93:19:55:5b:65:dc:
         23:37:c7:99:b9:f9:29:18:ae:a9:65:a6:2a:b0:bc:35:66:f2:
         b8:00:d0:6a:2f:b4:64:74:10:96:70:0d:ed:d5:44:e0:d7:11:
         2d:f1:f1:94:fb:b2:a2:58:3a:57:b4:c9:f1:21:b0:bd:dc:99:
         fb:d2:f4:18:18:9c:b1:ce:d7:31:ee:d9:87:c9:2f:af:0d:41:
         51:0b:2d:76:1a:af:84:b5:05:80:98:d4:02:76:64:8f:cb:39:
         fe:12:6c:4f:da:be:da:a9:da:13:cc:e3:1d:97:6d:df:3d:dc:
         d3:1b:45:8c:0e:a9:66:7d:64:91:93:de:83:38:d6:77:2c:5a:
         e3:dd:f5:9a:29:8b:af:80:c6:ac:e4:68:1f:cd:dc:15:90:4e:
         7e:7b:d1:9a:ed:ac:4d:dc:af:7f:14:0a:b3:6e:11:c0:12:89:
         b9:c0:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:27 2025 by rpki-client