Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea6a4a85-c51d-30fa-a40d-de136dc7d532.roa
File:                     ea6a4a85-c51d-30fa-a40d-de136dc7d532.roa (raw, json)
Hash identifier:          BXkTAI1U8mymi+w+XnVOX7xdyfBQBrTvKvvl30medRY=
Subject key identifier:   73:06:AC:8E:CF:34:AC:0D:BF:9B:3C:A9:1B:2D:D8:9F:6A:5A:3C:FE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B742756C6B8FDD74EC528A300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea6a4a85-c51d-30fa-a40d-de136dc7d532.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     0
IP address blocks:        205.172.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:56:c6:b8:fd:d7:4e:c5:28:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=d6288902-3ac4-43af-8e03-8beee1e335ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:f9:f9:b7:33:e4:b9:6a:39:14:0c:72:e9:
                    21:b7:54:e9:f0:8d:09:c1:49:21:1f:2f:da:7b:15:
                    0d:bd:fe:6f:9d:04:bb:ad:9c:fc:87:c0:55:bf:19:
                    fb:10:2c:52:b7:48:fc:13:66:cb:e9:45:7f:c0:ab:
                    3c:e4:cc:22:5c:cb:d3:89:5d:22:35:74:5d:17:d8:
                    fd:65:13:aa:76:97:ea:65:e4:0d:91:e4:4d:58:60:
                    07:4b:7b:04:94:c0:dc:6d:65:dc:2d:fd:d7:0c:26:
                    ee:bf:13:6f:d6:a2:14:0f:3f:93:46:13:1c:bd:4b:
                    81:8d:a0:b9:05:a4:66:53:44:e7:34:5e:2f:ae:1e:
                    95:8b:a8:31:30:a5:1a:b7:b7:10:d1:ff:be:dd:f3:
                    90:83:c9:5c:19:d5:65:9c:b5:da:31:70:29:7c:f0:
                    9d:4f:a0:22:d4:6e:e1:6c:3a:cb:46:d6:64:81:26:
                    14:40:f0:8b:12:0f:98:1f:60:38:53:05:70:1b:53:
                    77:4f:d5:63:cb:ff:9d:7a:75:6f:ac:45:ab:31:be:
                    de:67:a3:2d:47:c6:ac:84:eb:f7:06:ee:57:ad:1d:
                    71:20:08:fb:c8:df:be:4a:45:d4:e3:6c:18:bc:74:
                    e2:25:7c:a1:73:60:70:c0:0a:7a:63:af:4e:ce:46:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:06:AC:8E:CF:34:AC:0D:BF:9B:3C:A9:1B:2D:D8:9F:6A:5A:3C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea6a4a85-c51d-30fa-a40d-de136dc7d532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.172.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:34:2a:53:22:7b:7b:0d:64:30:c8:39:79:04:fc:ab:8e:
         5e:e2:a6:06:7d:41:7c:b2:de:a6:2c:25:4e:a2:37:95:f3:1b:
         29:95:5c:7b:ff:cb:01:e7:99:7b:b2:cc:1f:9d:39:42:b2:68:
         75:87:23:54:0d:7d:48:3a:9e:4f:d7:b7:84:3d:b0:29:a5:fc:
         1e:b1:57:51:fd:f0:49:12:72:8d:27:e7:81:58:a1:5a:3d:25:
         63:33:af:17:e8:44:f9:26:16:40:76:4a:6f:26:ff:5c:3f:99:
         c0:30:ea:36:8f:0b:36:a8:be:ee:d4:18:18:57:a4:5b:3e:af:
         2f:94:f9:03:a0:c6:36:6e:38:18:ff:16:e8:4d:4a:a3:0d:cd:
         b8:02:65:a7:af:74:6d:91:bc:04:26:7a:43:da:37:55:64:66:
         80:0a:b8:86:f4:9a:cb:1b:ce:03:de:7a:18:bf:8b:4b:6d:49:
         14:8f:0e:f9:45:b8:ca:2d:74:ee:44:25:3b:31:69:29:e8:d9:
         75:f6:4c:18:c9:ce:7e:fa:ec:af:6b:a6:a3:bd:96:fa:68:95:
         bc:8a:6b:6c:45:23:f1:27:ce:10:f3:8c:28:69:ce:35:37:63:
         21:a1:e8:1b:be:62:40:4f:b0:0f:49:8c:cd:24:ae:09:ed:25:
         0b:3c:eb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:02 2025 by rpki-client