Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa
File:                     d611f183-fce4-35e3-8186-2b1b64150e12.roa (raw, json)
Hash identifier:          f539ocyxbG28VuIRstGCcOtzPFOSXPFKbxWw7OQNRKE=
Subject key identifier:   86:C0:CD:74:D9:22:30:C0:11:1F:A5:61:7E:44:39:2A:48:8D:19:5D
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584B7DECB0102A0A963C56428900
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     399275
IP address blocks:        167.253.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:b0:10:2a:0a:96:3c:56:42:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=f6014ce9-0ae1-4476-a5bf-4d31ace453b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:cf:63:1d:d6:27:b0:b3:c0:92:2c:c6:29:
                    43:60:1b:ee:fc:44:fe:df:c6:73:56:a9:1f:e6:44:
                    04:ca:6b:a5:14:59:47:e2:23:28:4c:85:df:5d:a7:
                    b9:9d:5f:cd:17:3d:1e:3c:99:8a:f2:67:a3:75:0e:
                    a8:77:e4:7d:6c:9a:57:29:61:ee:90:be:a8:d5:50:
                    49:37:89:b6:9b:22:3e:eb:ac:b3:36:74:c9:76:90:
                    de:44:04:fb:5b:2d:d6:7b:75:86:9a:21:29:62:3d:
                    79:11:ca:62:e4:e9:ea:7f:a7:30:5e:49:7c:f7:7d:
                    86:1f:b3:51:a0:17:85:70:c7:b9:0d:e9:f4:52:b7:
                    f7:59:9e:f1:33:15:93:d9:cf:8d:b6:bb:36:5b:a2:
                    3f:8d:58:56:2e:2a:9e:8d:cd:d4:bb:79:4a:d1:92:
                    6d:71:de:8b:bb:b2:9e:32:c9:54:e1:a9:d5:19:cd:
                    7e:e5:d9:51:26:80:73:c2:46:b2:ec:74:6c:6f:02:
                    12:f2:9b:a6:08:58:ad:b4:2e:b1:d6:c4:0b:43:4e:
                    71:c0:f8:b6:ad:f5:a6:d0:0e:6d:07:c4:2c:35:15:
                    5d:1e:7f:fc:37:c6:a1:ab:79:48:22:52:4e:70:95:
                    3c:32:11:66:e4:7e:7a:23:3f:cd:01:28:c3:d2:d3:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C0:CD:74:D9:22:30:C0:11:1F:A5:61:7E:44:39:2A:48:8D:19:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:02:a8:55:90:f9:0e:db:9d:fa:6f:65:66:c8:8a:33:5d:1d:
         c4:ef:60:74:05:09:8a:cd:f2:89:8d:2a:12:57:e3:a4:85:ad:
         44:c4:47:ce:d4:c4:d4:6c:02:b4:e0:fb:58:19:b6:b0:64:85:
         e6:b6:d6:17:62:dc:22:fc:c8:bd:67:c4:0a:a9:1a:04:56:88:
         6b:9f:5f:a7:af:e0:39:64:9a:8b:28:3a:9c:19:2e:ac:fe:0b:
         14:ff:36:3f:07:63:90:7f:6f:3b:40:c7:b9:ce:71:3c:d4:37:
         85:98:b2:91:0e:8e:0b:3b:e2:96:c8:4e:c3:86:d1:1b:79:27:
         16:5e:63:70:8a:98:9a:0f:c7:df:14:5c:4f:10:74:3a:f8:39:
         5d:17:be:9f:df:14:3b:15:8a:66:b0:60:78:87:7b:26:a1:36:
         3e:cd:b3:3f:8c:f0:87:ad:f3:b4:83:7f:ca:79:6d:c9:19:59:
         ba:aa:b2:e2:a2:4f:97:2c:35:3c:9e:a8:2b:68:57:28:2f:ee:
         29:96:b0:91:16:84:ba:9d:2d:b6:bc:c7:8f:27:8f:42:f8:a7:
         d0:ac:11:9e:23:3a:ef:90:34:f2:a2:41:0a:2d:96:14:a1:d0:
         48:a1:24:85:28:89:56:87:0e:a4:2c:26:74:a0:b6:61:fb:cd:
         54:d8:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:19 2025 by rpki-client