Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa
File:                     59042824-a974-3473-be58-532204e52132.roa (raw, json)
Hash identifier:          sgrlQ8yNfObiijDzhQqEmwbO3OVi+HHCLQyo458z5H4=
Subject key identifier:   EB:DE:61:9A:F9:C6:93:60:58:E3:2A:EB:40:37:72:A5:3C:34:A5:93
Certificate issuer:       /CN=60b944fb-40a6-4574-a25b-dd101d7b668d
Certificate serial:       010D0C9F4328584B8EACCDE9561E1E3224C97840
Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     46445
IP address blocks:        192.40.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cd:e9:56:1e:1e:32:24:c9:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ca53442b-b606-4eaa-9147-540db373836b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:9a:08:bf:1a:84:62:5b:e8:1c:0f:09:12:
                    97:39:b5:87:f3:4e:4c:d8:a2:14:2e:9b:4b:d9:ed:
                    b1:a4:8b:1c:e8:63:ea:a4:73:a3:99:6b:7a:12:f7:
                    b4:e6:56:6d:34:6f:e5:ba:fd:ce:56:a7:e9:ad:5e:
                    cd:a2:d3:93:ec:51:c7:03:1e:4c:15:bd:dc:ce:af:
                    ad:ec:b4:e3:91:64:47:22:52:38:ca:f3:3e:f7:aa:
                    87:64:a7:c8:5f:da:da:35:d8:2b:1c:05:e2:df:ec:
                    f7:8e:5d:5e:4a:9d:52:71:23:c1:a3:95:d6:ed:18:
                    8f:5f:a0:c6:2e:7a:cd:64:e0:93:8c:26:60:d8:d8:
                    25:7c:71:b2:6e:97:22:96:18:6d:ec:00:98:a2:53:
                    14:65:2f:21:e3:9c:f8:2c:d7:61:11:e8:1a:f4:00:
                    a3:e4:1a:04:20:87:02:ca:08:5a:bc:6c:0f:d5:3e:
                    16:07:b8:72:47:01:51:f7:d4:89:c5:a8:37:9b:63:
                    03:d1:94:08:19:a1:87:15:60:24:fe:8b:23:eb:09:
                    e8:34:c6:cf:7a:2d:b0:49:83:77:90:1b:10:fd:e0:
                    a5:6e:b5:a3:8b:b0:99:8c:f9:41:84:ab:7f:c1:1f:
                    60:62:dc:1e:b6:ca:13:a0:f9:23:5a:a8:e3:bb:89:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:61:9A:F9:C6:93:60:58:E3:2A:EB:40:37:72:A5:3C:34:A5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:5e:67:1a:7e:30:7f:0b:1c:d7:d5:39:ec:31:b1:61:9d:3b:
         c8:8c:18:31:df:ae:e7:d7:66:24:7f:74:9d:be:22:79:31:8f:
         c6:d8:46:3d:93:b5:16:a4:7f:d4:41:2e:0c:04:c1:59:92:c7:
         62:ae:e2:bd:ac:09:bd:08:47:28:8a:7e:df:5f:98:2e:5c:f0:
         5d:cd:9d:c4:8a:a6:cd:ec:22:49:e3:a9:2b:1e:d9:0f:26:19:
         d5:35:a6:f1:58:f8:50:5b:bd:1f:58:2d:b5:4b:df:c2:1a:91:
         f0:e9:eb:fb:71:6b:bc:0a:bc:fa:07:cc:cf:d9:78:b5:01:98:
         67:14:0d:4d:5a:a9:06:cc:91:1c:d7:c7:8a:e8:cf:d6:fb:4e:
         31:55:e8:d2:c2:73:1f:d1:bd:8d:64:47:bc:cc:f4:b8:b9:c2:
         8a:40:35:67:13:10:29:82:44:c8:52:3b:b9:0c:7b:48:c4:0f:
         00:4f:36:ac:7a:4f:3b:ee:4d:3a:86:51:ee:58:70:69:93:36:
         e2:47:b3:c1:7a:4b:5c:39:a0:f0:b2:41:a6:b3:f9:f2:c5:b4:
         9a:13:09:8e:2e:d1:ea:41:8a:69:c7:9a:d7:f2:00:9f:aa:3e:
         c9:72:16:90:85:1f:e0:1c:85:e8:d3:12:d1:43:8a:a6:7a:3d:
         5f:a1:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:02:55 2025 by rpki-client