Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c25f2231-b6a0-3091-8dc6-a7b471c0899c.roa
File:                     c25f2231-b6a0-3091-8dc6-a7b471c0899c.roa (raw, json)
Hash identifier:          WbZKqR474NOtGjwGbyqvE+9NOXyb3wdJFZzE95351dU=
Subject key identifier:   EF:C5:4D:92:F3:2F:1B:C0:6F:FA:C1:8D:3D:E5:09:0B:5B:5C:EE:CC
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584B715CA6B0974B9D843280A800
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c25f2231-b6a0-3091-8dc6-a7b471c0899c.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     46186
IP address blocks:        66.22.46.0/24 maxlen: 24
                          66.22.47.0/24 maxlen: 24
                          66.22.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a6:b0:97:4b:9d:84:32:80:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=5a699283-b0a1-44cd-998b-1dfcfd2e293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:95:70:e8:a8:a8:3f:31:50:70:11:54:f9:
                    d5:36:bb:bb:59:f5:a8:2d:49:1e:5c:ad:23:38:9d:
                    2c:2b:2a:fc:a8:2f:9a:71:5e:c4:16:58:d1:25:ad:
                    ca:e4:1a:d0:43:d5:94:46:6d:91:db:7e:46:36:ef:
                    9d:ea:ad:9d:04:9b:f1:29:b3:8e:43:7a:15:6c:b2:
                    5a:73:2f:9f:ca:5c:82:a4:f0:a1:79:c8:de:6f:9c:
                    9f:a0:4f:f7:b5:25:34:b8:95:f1:73:d5:71:87:80:
                    66:b4:27:38:cc:c7:ef:8b:07:6a:7b:74:61:52:9e:
                    60:70:dd:13:33:70:b3:02:f3:46:a6:0d:4c:73:21:
                    a7:c2:7f:25:fb:09:73:8a:9e:20:c4:e7:8b:56:47:
                    04:39:28:da:20:71:d4:d4:29:0d:b9:56:1b:c3:a8:
                    ed:a1:9e:87:7b:26:ae:2f:9d:08:9b:72:b1:18:55:
                    13:71:03:0f:e3:75:30:80:ee:c1:dd:02:2c:b0:e2:
                    b4:a0:82:15:01:5e:31:7c:4f:c3:fe:8d:18:0b:a0:
                    be:40:90:af:0d:de:f0:26:36:e5:f8:02:03:95:99:
                    05:0d:fc:de:cc:79:1c:da:d8:18:99:13:4c:d9:6e:
                    4d:4f:8c:4b:68:b0:56:fd:88:e6:f1:0c:da:ca:05:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:4D:92:F3:2F:1B:C0:6F:FA:C1:8D:3D:E5:09:0B:5B:5C:EE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/c25f2231-b6a0-3091-8dc6-a7b471c0899c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.46.0/23
                  66.22.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:8c:cb:32:7a:c2:c7:56:3f:55:8c:4b:65:25:00:87:e3:
         51:6a:15:6f:d5:39:eb:45:a8:1f:7c:06:30:7b:1a:0b:03:81:
         33:a7:f7:87:c8:85:5a:7b:cb:6e:f6:1d:54:1a:cc:eb:ea:c2:
         f3:aa:83:f3:04:98:23:21:a2:a8:66:4a:ec:76:70:79:5e:3b:
         36:73:76:64:3e:ad:1f:db:69:6c:35:88:08:01:5d:89:5e:37:
         2f:25:39:e8:b1:0b:52:9c:78:b8:08:8a:2a:37:f9:71:31:47:
         f1:43:e6:4f:d1:cc:7d:30:12:6b:05:0f:c8:f5:29:4d:44:2f:
         40:a6:6a:a9:ad:c0:bc:1d:c3:d0:1f:77:cf:f1:c4:26:72:82:
         90:0c:6b:69:b1:ab:64:3f:94:36:4d:f1:c9:1d:09:45:0f:56:
         af:a9:d4:6e:43:1d:56:1e:b0:52:42:93:c7:e3:03:b8:0f:82:
         81:f2:9d:71:6d:14:a7:b8:90:d8:ba:85:36:ae:9a:d6:e1:47:
         7b:c7:16:a5:32:30:6c:45:12:7c:ac:3d:ef:1b:fc:2b:47:d4:
         23:4a:5f:9b:2b:99:49:70:57:ab:3a:d7:8d:57:a8:76:a2:89:
         20:7e:11:22:d6:7f:cf:68:6d:0d:33:91:73:6b:18:2b:43:da:
         35:db:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:09 2025 by rpki-client