Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa
File:                     e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa (raw, json)
Hash identifier:          FdWV46ASechMPMmYVfnjTT0wucXYEE7zLMiQl2uWr4s=
Subject key identifier:   35:C7:FF:FB:CA:F9:69:F9:99:02:2A:52:AF:E4:76:05:0F:FA:96:79
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F4328584B8EACD8F1AD708B29F2051C60
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        64.35.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d8:f1:ad:70:8b:29:f2:05:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=259496ca-0999-45e2-853a-c906c1cf9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:fa:3f:0f:01:5b:10:65:d6:2f:32:97:75:
                    7f:c4:05:38:a0:99:29:e2:5f:c9:49:35:97:33:b8:
                    ee:97:39:ea:60:18:96:7f:31:57:c9:8b:29:dc:1e:
                    40:64:91:7a:73:79:3a:1b:68:62:80:4e:4a:cc:1a:
                    80:8b:cf:1f:fa:5f:58:f1:1a:f0:b9:3c:dc:a8:29:
                    72:35:54:2f:93:34:c1:d7:f6:50:25:73:f0:b1:80:
                    11:4e:de:0f:58:b5:5e:40:ee:92:3a:b3:a8:1e:16:
                    94:1e:b8:23:45:64:c8:4f:6b:02:58:aa:72:54:bf:
                    5d:0d:95:47:99:6b:51:c9:8e:5c:d0:52:d2:cf:29:
                    36:c5:ca:32:a0:5e:2c:66:73:1e:6b:3d:ed:6c:57:
                    b2:0a:93:d3:bc:5b:4c:94:cc:4f:0d:6c:f7:19:aa:
                    e8:ac:13:db:d2:95:df:2e:e6:90:5d:7e:70:33:9b:
                    79:9d:c2:c2:87:f5:7b:05:90:b7:d5:66:8a:a0:42:
                    b6:30:e6:35:a4:07:e7:c9:65:4c:36:0f:d8:d2:97:
                    22:af:21:49:1f:e5:7b:ea:49:98:f9:8f:d8:33:31:
                    96:6b:cb:e3:44:ac:c4:6d:0e:b0:e3:31:5a:11:07:
                    44:7e:82:f0:bb:57:ee:1d:5e:2e:a8:b2:d5:38:59:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:FF:FB:CA:F9:69:F9:99:02:2A:52:AF:E4:76:05:0F:FA:96:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:22:a9:9c:5e:54:0d:6e:11:db:ca:56:30:96:43:9a:80:44:
         dc:3c:dd:ff:3e:8d:1b:aa:6a:15:d0:bc:d8:56:ff:96:02:04:
         72:37:65:fd:8c:38:e6:c9:3a:d6:e3:63:41:0c:f6:af:92:ac:
         67:f1:cb:06:a2:0b:db:77:60:18:f0:54:78:de:3e:23:a9:ab:
         dd:45:a7:08:67:2a:5c:ce:9e:2a:02:f8:14:75:8c:22:2e:cb:
         f3:fa:bb:d8:55:5e:5f:d1:a3:f6:29:b0:e6:58:f9:bf:b5:74:
         06:5b:81:47:fc:c6:21:3c:0d:77:db:9b:3e:36:5a:07:8e:e8:
         55:09:47:69:d2:78:28:48:a4:e4:95:44:cc:67:dc:74:de:4f:
         46:43:13:32:8f:b4:58:a1:cd:b8:94:b2:61:56:6a:e1:22:b7:
         02:eb:ff:e8:64:ab:40:bd:a9:a6:3a:01:c5:69:b5:21:22:c2:
         95:06:12:70:29:c1:ee:a8:09:5e:38:93:7f:49:15:4d:49:63:
         d5:1a:a4:a1:ff:ff:e9:29:0c:b6:7e:d1:fb:41:87:46:68:6d:
         b2:13:c1:56:c6:42:30:8e:7a:ba:6f:6c:59:0e:85:38:1c:2b:
         79:df:a3:c4:03:95:2d:99:c3:84:90:25:f7:3d:45:d0:ee:0f:
         a5:62:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:58 2025 by rpki-client