Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa
File:                     4352fe98-6e7b-3d25-979a-a24f98bda45b.roa (raw, json)
Hash identifier:          vvG85QiGmbskLSoQyU1mUbLQtGFbyEY7gFlKhDNmR+Q=
Subject key identifier:   AB:3E:0B:C2:8F:86:C8:60:94:86:E1:C8:2E:93:97:90:A0:75:08:50
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584B92DCEB097CF90C7891070400
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7029
IP address blocks:        66.110.39.0/24 maxlen: 24
                          66.198.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:eb:09:7c:f9:0c:78:91:07:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=f1b92f04-90a7-4c21-8f3b-d1b75ddfd357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:50:d7:18:2d:c5:5f:de:d2:56:31:62:0b:
                    82:51:3b:0a:1e:28:a2:f3:65:25:7c:cc:78:9b:be:
                    86:32:ec:de:2a:7c:6a:3f:e2:31:49:8b:e5:c9:a7:
                    ac:2b:9f:52:30:60:bc:b3:9f:a2:a4:65:38:82:16:
                    5b:b3:49:29:6a:c4:61:99:21:ca:4d:f2:b7:2d:6c:
                    5a:fc:ad:a6:23:95:5e:a3:fc:a3:3e:45:50:73:4d:
                    6e:9c:db:b5:d4:c3:4e:c2:7d:64:ff:77:74:e7:dc:
                    f0:c0:ec:bc:26:81:c0:83:b3:6d:83:18:c6:0c:11:
                    4c:0f:f2:b5:8c:f6:70:7a:68:12:52:3b:51:da:b4:
                    74:18:b2:4e:f8:70:67:7d:39:5e:10:01:bd:96:9f:
                    19:60:b3:44:c1:41:d7:71:17:fa:14:4d:de:d9:ac:
                    fd:c5:95:e3:26:4e:12:db:8d:b9:c9:69:f8:d9:7e:
                    66:a0:d2:78:fa:41:eb:e6:a8:0b:dc:f8:bb:a4:94:
                    72:ca:3d:07:86:f5:a8:95:46:f2:f2:32:28:f5:23:
                    b1:c3:c5:80:93:fc:b0:77:1d:ae:17:c6:cd:ba:7f:
                    20:2e:2e:d2:c8:d2:3e:e2:c0:61:78:9f:b9:40:dd:
                    4c:85:a1:3f:0e:e9:22:97:1d:4d:bc:fb:54:09:5b:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:0B:C2:8F:86:C8:60:94:86:E1:C8:2E:93:97:90:A0:75:08:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.39.0/24
                  66.198.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:26:1f:1a:ec:2c:86:0a:93:e9:b9:13:1b:1e:15:a3:fe:
         29:15:7a:6f:1a:11:cc:6a:cc:da:a1:fa:64:32:3c:09:dd:61:
         40:3e:df:74:e3:41:c8:f2:99:1b:c1:47:99:39:e3:4f:75:75:
         7a:84:74:7a:b1:38:85:75:f6:6f:4f:2b:14:31:17:8e:61:b9:
         be:d3:79:fb:95:f1:41:8b:c0:1b:01:73:66:cd:c1:e2:01:db:
         29:6c:52:23:15:3d:73:76:58:e6:82:c1:3b:a2:14:6f:f0:eb:
         fd:21:7a:d5:f8:11:d9:27:e6:d9:b4:67:dc:72:8f:05:09:5e:
         7f:cf:10:fe:10:c7:d6:aa:52:f7:9a:f1:10:2b:53:84:bc:62:
         74:f3:1f:65:3a:36:fd:70:15:9f:45:a6:fc:6f:77:90:42:37:
         3f:87:00:c9:af:e5:e4:3a:92:00:3b:f2:a0:34:c9:b3:5e:56:
         f8:f9:d7:fd:4f:8a:86:49:69:03:17:79:78:cb:2a:41:8e:79:
         9d:b7:da:13:b5:2b:70:60:f6:e9:5f:2d:9c:ee:86:e1:dc:c3:
         ad:4a:fc:f6:6a:61:f3:bc:e6:f8:f9:90:fa:5d:40:e2:5f:2d:
         f5:0b:ba:f2:39:e0:60:06:4f:06:2a:73:ab:cb:5b:69:ea:f0:
         1d:4e:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:18 2025 by rpki-client