Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa
File:                     b5655fc8-1d89-3634-9563-5f5462c59041.roa (raw, json)
Hash identifier:          dXZQ/JmuzMzvFRkUkkrQh9n5ZoOKmE4sEI8IhRujx6s=
Subject key identifier:   8C:D1:75:ED:AE:76:80:6C:80:EC:76:BC:7A:14:63:D2:E2:43:A8:E2
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584B328C35766AF1392838982700
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     50131
IP address blocks:        65.75.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:35:76:6a:f1:39:28:38:98:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=bc243779-ef54-4ba7-bc04-af9b2f9067ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:be:51:ea:de:e3:7d:08:e3:c1:f8:f4:10:
                    e4:44:b6:52:22:4c:6e:79:14:16:8b:d6:a6:cb:11:
                    12:5f:4b:d1:ae:e9:60:d5:b4:fc:40:dd:bf:d7:31:
                    fb:07:16:0e:95:76:15:e4:42:07:26:2a:d8:8c:65:
                    78:51:a1:33:83:f0:e6:1d:0f:0e:38:25:52:b0:0e:
                    83:1f:50:b3:a7:46:f2:6c:04:04:bd:e5:e2:b1:74:
                    cf:cb:c3:eb:96:d8:e4:9d:b7:f0:26:6b:8a:f6:ae:
                    25:e6:a6:40:9f:54:1d:c1:90:ef:7b:56:6a:88:9c:
                    0d:11:a2:d4:19:26:7e:c4:b6:49:7d:e0:4d:12:89:
                    9e:e5:a1:44:78:86:79:cf:6c:ed:9b:b3:e4:df:ad:
                    bc:a4:28:59:88:ce:91:ae:3f:8f:52:34:bd:64:ed:
                    05:b3:ba:d8:9f:8d:dd:c6:8d:38:28:42:28:14:fe:
                    1c:8b:c5:cc:f8:e6:8e:98:c2:91:b7:e5:98:74:63:
                    db:5b:1b:46:5d:6a:6d:7b:f0:ac:a6:ca:bb:12:0e:
                    15:e1:5e:a8:56:58:0f:8f:cb:ab:98:2b:54:fb:2e:
                    31:d5:04:e2:6b:6f:09:d9:89:80:58:86:bf:3b:9f:
                    31:5d:6e:af:5d:c1:cc:96:29:d5:4e:c9:85:80:52:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D1:75:ED:AE:76:80:6C:80:EC:76:BC:7A:14:63:D2:E2:43:A8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/b5655fc8-1d89-3634-9563-5f5462c59041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:db:1b:af:b0:91:bd:2f:38:f2:7c:e5:45:a2:d6:d0:63:83:
         7e:99:6d:57:d5:b7:fe:7f:4c:f5:44:7f:97:7e:fb:d5:6f:51:
         df:5c:69:74:db:eb:e3:37:56:86:42:49:ea:44:21:68:81:ce:
         3b:74:21:38:ee:98:1c:f9:b8:df:9b:88:bc:ca:de:42:2a:b0:
         29:bb:92:8e:b3:7c:82:48:ca:fc:26:df:57:03:73:6e:f8:ad:
         5a:73:7d:e3:0c:45:43:72:6a:1e:53:e5:80:89:53:ba:35:72:
         94:21:0d:7c:2a:97:a1:89:f0:c7:b1:2c:5f:23:ba:8a:86:d2:
         58:f3:ed:6c:cc:14:2a:a2:74:ca:c3:9f:51:b3:a5:80:5b:45:
         2d:4d:e4:c9:ac:4c:83:19:80:ac:46:ca:97:2b:d8:75:af:53:
         65:ab:41:e8:00:b4:6a:44:bc:82:28:69:ec:a2:af:57:96:7a:
         18:f9:fe:c4:a7:66:16:65:fd:ae:65:7f:c6:2b:9d:ac:45:a0:
         12:a2:a7:96:21:ae:10:11:a8:d3:33:99:58:1c:5d:15:40:76:
         1a:5d:f6:b1:b3:3e:d6:fa:db:06:30:06:3c:9e:e5:8c:a9:7b:
         9a:aa:b5:fd:0b:5c:97:7e:41:68:1b:1c:4c:ce:0e:8b:5a:e9:
         95:16:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:56 2025 by rpki-client