Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2361247-1026-3198-a3c7-010619e7d172.roa
File:                     b2361247-1026-3198-a3c7-010619e7d172.roa (raw, json)
Hash identifier:          t6WFZh/vS1mn9OrejEZ5xdAwy4mq7FXToeLg3LpuNog=
Subject key identifier:   48:D8:D3:3D:33:DF:AE:5C:2B:33:2C:14:C6:C8:51:CD:08:14:6B:D3
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584B715CBB490C71DF661DC296C0
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2361247-1026-3198-a3c7-010619e7d172.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     20055
IP address blocks:        74.205.192.0/21 maxlen: 21
                          162.248.8.0/22 maxlen: 22
                          162.248.140.0/22 maxlen: 22
                          204.155.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:bb:49:0c:71:df:66:1d:c2:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=35b1e028-7f0c-43cc-84d0-1598bb0d0d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:02:ff:57:0a:73:55:8e:ce:8c:20:ae:79:
                    50:e4:ff:75:51:04:69:3f:d9:23:24:4c:a5:08:ea:
                    ad:b6:16:2a:87:24:0b:43:a7:8e:3f:03:7a:e2:26:
                    9e:56:5d:f8:c7:91:8d:24:ed:be:92:9f:6a:07:17:
                    34:2d:cc:09:c7:ef:6d:3c:cc:b4:d9:fc:43:97:bc:
                    8e:48:fd:b2:24:94:77:4c:a0:75:e2:f2:c6:47:d9:
                    aa:15:5e:be:84:d7:19:2f:71:f5:21:31:e1:ce:a8:
                    b1:f4:98:56:59:59:9c:33:08:d6:9a:e6:e3:0e:fe:
                    07:ac:fc:33:2c:9e:7d:5e:25:c5:dc:8c:de:db:57:
                    32:20:78:7e:97:ce:2e:89:11:e3:2a:a4:a2:be:89:
                    17:89:14:86:be:3c:18:08:3d:a4:e2:e4:3a:a4:1e:
                    ba:d3:08:5f:b9:8c:c2:d5:e5:55:21:e9:14:4c:51:
                    0a:e3:e7:e1:64:d2:61:86:90:a9:55:c0:af:e4:15:
                    cd:d7:b7:53:12:4a:97:0a:7c:54:40:fa:9e:24:00:
                    88:50:f8:5f:cc:b5:d1:f8:e0:b6:47:e3:5b:2b:cc:
                    44:3e:a9:0c:41:12:7e:82:c9:70:f6:07:c0:83:42:
                    60:89:f4:7e:ef:c6:00:86:d8:2f:31:af:8d:34:2e:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:D3:3D:33:DF:AE:5C:2B:33:2C:14:C6:C8:51:CD:08:14:6B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2361247-1026-3198-a3c7-010619e7d172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.192.0/21
                  162.248.8.0/22
                  162.248.140.0/22
                  204.155.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:7c:e2:e6:99:b1:38:68:9f:aa:4b:eb:c9:fe:12:8b:f5:
         56:2b:1e:cc:35:c3:7f:39:2d:32:e1:63:eb:5a:01:b1:fb:43:
         bf:e8:69:60:40:ed:19:0f:06:37:28:48:6b:6e:8c:6f:a0:4c:
         7c:6e:9a:7a:87:94:4c:74:b5:61:8c:dd:70:dc:a0:02:95:80:
         53:27:a2:75:d7:7a:e7:ad:c2:ff:8f:02:c7:38:21:3b:ca:12:
         46:52:9d:e2:0c:3c:1c:28:71:49:6c:bd:c8:e1:11:f7:f4:f0:
         25:b6:77:87:80:9e:84:6d:ad:5a:3d:dc:ca:57:b5:37:50:31:
         4d:78:52:7e:75:50:73:1d:4f:8f:c2:fb:b2:e8:8a:83:67:8d:
         1f:f0:c6:cd:20:f6:1a:bb:02:f0:e3:c2:39:3d:49:72:3f:ee:
         2e:b3:23:39:e7:1d:c6:98:ce:8e:50:75:b5:43:29:97:93:0c:
         b6:47:21:e2:b6:b9:40:3e:7b:62:e5:fd:3d:b7:31:37:d2:a9:
         d5:b0:33:b9:31:5d:26:d4:c2:8c:d6:50:80:f6:7c:a2:86:67:
         eb:05:3b:02:7d:83:ce:f2:a5:77:80:9e:a4:c6:0a:0e:38:07:
         e6:84:44:6b:08:6e:98:7e:ba:80:f7:df:bd:84:5e:e9:75:ea:
         42:ec:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:41 2025 by rpki-client