Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a66e1098-cc24-3cfe-8b5e-c177c32ca99f.roa
File:                     a66e1098-cc24-3cfe-8b5e-c177c32ca99f.roa (raw, json)
Hash identifier:          H3hecUhR6ardg2EOHwtDEO1w5RGP6iiaO7n3SUCvo+o=
Subject key identifier:   2C:98:C8:5F:84:62:9F:1F:BB:9D:79:92:BE:78:C6:E7:9A:E0:B4:41
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B85AF3E1924DC2E8CCE0D40C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a66e1098-cc24-3cfe-8b5e-c177c32ca99f.roa
Signing time:             Tue 14 Oct 2025 19:43:18 +0000
ROA not before:           Tue 14 Oct 2025 19:43:18 +0000
ROA not after:            Mon 12 Jan 2026 20:43:18 +0000
asID:                     271855
IP address blocks:        154.7.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:af:3e:19:24:dc:2e:8c:ce:0d:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 19:43:18 2025 GMT
            Not After : Jan 12 20:43:18 2026 GMT
        Subject: CN=f4a084d4-bb4f-42d6-9f22-76709425aa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:94:23:db:77:0b:b8:02:a0:eb:20:92:0d:
                    33:e2:c4:18:55:0f:ec:e8:5f:2b:53:7c:ef:0a:53:
                    82:3f:4c:da:4a:12:28:28:19:f2:92:0e:2e:7f:df:
                    00:1e:5c:3a:a6:13:c8:c5:70:92:fc:a6:6d:77:e5:
                    bb:06:fd:69:5c:6b:5b:1c:78:43:ae:29:5a:82:bd:
                    86:40:f4:8d:5e:e1:dd:83:6c:9d:ea:5c:40:ed:f0:
                    f5:0d:d6:00:30:61:33:2f:d9:0f:1d:68:a2:07:23:
                    d9:9e:fc:db:a0:15:57:4b:77:95:c3:ea:18:18:a1:
                    41:72:a2:48:8a:d4:f4:7f:83:78:ed:8f:6d:52:dd:
                    72:9e:3e:d7:f0:08:65:a1:5d:96:48:8f:6e:71:3a:
                    39:70:0b:58:d6:9d:66:47:7d:83:c6:fc:57:90:0c:
                    17:43:94:8a:21:2d:6a:e4:ff:f7:65:08:6b:4c:21:
                    cf:3c:c3:8f:9f:f4:f5:bb:af:0d:5b:2d:a3:58:95:
                    91:67:96:36:78:88:71:0e:f7:d8:4b:04:fd:44:f0:
                    c4:d7:da:29:2a:bd:b2:68:2a:c1:75:a0:8c:14:aa:
                    34:60:0c:07:ea:4c:a8:9b:5e:60:8e:e6:1e:e1:f4:
                    4f:c7:14:fe:9e:d6:b8:cc:b0:15:9f:73:22:e7:21:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:98:C8:5F:84:62:9F:1F:BB:9D:79:92:BE:78:C6:E7:9A:E0:B4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a66e1098-cc24-3cfe-8b5e-c177c32ca99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.7.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:18:2f:bb:7a:b8:04:2b:20:0d:a0:e2:27:f1:10:fa:9c:
         01:c5:60:d8:80:d3:d0:f3:dc:53:ba:d4:d0:dc:2a:2e:6f:ed:
         d6:81:b0:70:2f:66:a5:79:0d:39:e1:f1:b7:21:16:48:0c:46:
         d2:b6:b1:87:37:97:f9:64:3a:98:02:5e:8f:86:57:ab:60:25:
         52:82:83:40:58:71:8c:a1:8c:c2:f5:27:37:c2:d2:53:73:a0:
         0a:b6:1e:3b:26:6c:34:f0:59:11:3d:98:90:33:b8:40:2a:dc:
         97:e2:3e:bd:0d:78:3d:c2:0b:82:62:cc:7b:fb:ff:34:77:59:
         96:90:01:08:41:6b:f3:0f:a9:e4:be:2b:01:1a:11:10:1e:a4:
         37:8f:26:48:5c:40:56:37:05:c6:f6:6a:43:58:5f:94:fa:58:
         d7:50:5b:ed:89:3d:75:46:ed:da:8c:ef:1f:91:48:cc:a3:ea:
         e3:d9:5f:6f:08:3a:ba:56:e5:f5:a7:38:ac:0c:c8:23:e4:d3:
         6e:6d:5d:36:2d:cd:f6:75:64:ca:af:6b:dc:b2:9d:4d:36:7b:
         8d:1f:08:c0:68:89:ef:53:1a:94:9c:ba:01:3f:2c:d5:3c:54:
         84:01:a6:81:36:10:39:8a:84:54:bb:fb:9b:e7:08:68:8f:be:
         3f:5c:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:12 2025 by rpki-client