Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d636a525-8e77-3828-8fbc-f6d836107ad5.roa
File:                     d636a525-8e77-3828-8fbc-f6d836107ad5.roa (raw, json)
Hash identifier:          49h2GcxN0fZDBD1PXvZc5Mw9nECbHrwSfe0ylZElnAs=
Subject key identifier:   31:51:DD:8E:B0:4E:F0:7D:0F:35:57:EF:95:A5:E0:7B:DA:88:79:0B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B758C9A3E2806C9890487E360
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d636a525-8e77-3828-8fbc-f6d836107ad5.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     21859
IP address blocks:        66.78.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9a:3e:28:06:c9:89:04:87:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=95b8bc1e-a572-4024-926a-e369c4eeda65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:23:41:41:d5:51:33:ed:2f:9a:42:75:d8:
                    fd:f6:12:b6:be:1f:1f:9c:31:d6:0c:85:d7:ae:86:
                    57:02:a7:31:22:f6:99:42:64:7f:3e:6e:54:49:ba:
                    9f:c1:46:73:43:8c:0b:56:a3:54:fa:c0:8f:9d:bc:
                    22:b0:49:c2:7e:4d:05:dc:45:6f:a6:78:b0:f7:e8:
                    bc:59:e3:58:4b:2b:e1:b8:d1:30:0e:28:1f:d0:bd:
                    b7:5a:2f:da:72:8e:91:27:90:43:d2:46:d2:1f:e8:
                    df:d4:f4:16:c6:33:33:75:4e:fc:9d:54:24:0b:f9:
                    e0:d3:fc:7b:d2:37:d2:0f:b4:1f:70:3b:76:e6:8c:
                    14:52:cd:0a:14:dd:ba:0f:e0:70:99:9d:5e:dd:6a:
                    27:df:67:35:3c:cb:d7:c4:40:55:7b:80:f7:51:63:
                    8b:41:d3:d6:9e:60:a8:fa:c3:b9:7e:42:b5:d3:3a:
                    71:c5:75:3e:9e:d9:e2:18:5c:d2:69:f0:0e:5e:4e:
                    46:66:62:34:65:48:c5:ff:ea:81:c6:b4:28:f7:34:
                    c1:57:1f:fd:a5:10:ea:c7:2f:dd:93:a3:e8:9d:76:
                    2c:19:0d:eb:99:ff:a0:35:1d:24:d7:35:41:c1:ad:
                    a3:d8:f0:26:0e:5f:3e:02:2b:47:e8:ad:35:4e:5b:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:DD:8E:B0:4E:F0:7D:0F:35:57:EF:95:A5:E0:7B:DA:88:79:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d636a525-8e77-3828-8fbc-f6d836107ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:87:cc:a6:52:fd:79:0e:85:ba:90:5a:25:15:07:6e:eb:0c:
         39:6e:a8:e3:72:4b:a0:fd:51:06:3e:7a:a0:b9:bd:fe:60:13:
         e2:d4:77:31:a1:bb:87:9f:78:3a:36:30:4f:76:12:5b:69:74:
         4b:eb:4f:9f:2d:ad:5d:94:90:b1:ad:f5:71:5a:df:a8:10:83:
         a1:cc:6d:3c:3f:70:b1:7b:25:29:64:a3:77:f6:d2:4b:01:a3:
         a9:f0:b9:f3:fe:a7:39:e5:0a:6a:16:eb:d6:88:7c:30:93:5b:
         d1:a6:39:1b:dd:8c:53:f7:f5:dc:b6:1c:b4:50:ca:2e:2f:40:
         46:4e:9f:c4:55:80:cb:73:ca:eb:f9:16:14:73:68:5d:4d:51:
         61:57:3f:c9:5a:e0:1a:94:7f:7d:ea:86:20:9f:a4:7f:f3:ab:
         c8:d3:ef:13:56:ba:fe:66:e8:c0:38:95:b0:c6:e9:0b:55:ea:
         ae:28:3c:ad:ec:f2:ac:d7:0c:3c:44:e9:59:4b:f3:3f:06:66:
         9d:28:f9:bf:3a:ed:37:c8:62:f8:24:c3:0a:cd:b4:89:87:30:
         38:64:30:2b:4d:6d:79:84:29:cd:4b:29:2e:7a:c6:87:3c:43:
         ae:5f:e1:61:08:9d:d3:a5:a9:3a:0e:ce:0b:b2:62:9c:b8:a9:
         a1:28:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:32 2025 by rpki-client