Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
File:                     9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa (raw, json)
Hash identifier:          ByJ6jA8UR93fbqOHNBDDNfiM0ZNyPFSV21BIXU9P1Ao=
Subject key identifier:   72:6F:F4:A8:45:5D:5D:A3:6F:CC:CE:14:D0:27:23:ED:D2:EF:6A:8B
Certificate issuer:       /CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
Certificate serial:       010D0C9F4328584B8BE20B7847DA54B0DBC01480
Authority key identifier: 9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     46958
IP address blocks:        74.113.204.0/22 maxlen: 22
                          2620:126:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0b:78:47:da:54:b0:db:c0:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=41503ecc-2f3b-4082-8c1a-788b729f68c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:42:a6:9d:d7:a2:59:39:58:17:59:e6:60:
                    bf:cb:dc:73:18:0f:a2:cd:01:a0:57:65:a1:e2:0d:
                    48:49:4f:b8:cf:a4:65:d5:33:38:9a:d7:ff:e7:fd:
                    de:f7:42:1f:f4:f1:1a:a1:30:8c:24:a4:dc:2a:9f:
                    ad:92:18:34:b2:60:2d:f6:79:b8:05:f5:2c:9a:16:
                    09:ab:9a:ff:f5:13:fd:30:d2:11:d1:3e:df:ae:ed:
                    11:27:35:f2:60:fc:8c:0a:05:93:0b:33:1b:e3:67:
                    dc:c5:86:20:6f:16:a4:39:42:e1:d3:f6:a4:c3:24:
                    f6:2a:41:c4:69:ef:72:0e:3d:f2:22:25:f5:e8:15:
                    50:60:79:97:1b:11:71:61:9e:f4:0b:4a:85:e6:6b:
                    d4:47:58:c1:02:f0:e7:cb:34:95:50:73:af:c2:4e:
                    a8:4a:1b:98:23:3e:13:48:fc:69:85:42:82:07:de:
                    05:95:c6:5e:2b:68:25:31:f3:ec:e6:a8:79:8d:62:
                    4c:7a:1c:e3:e2:91:8c:a4:59:11:77:85:79:80:10:
                    42:41:9e:7e:10:59:46:61:e4:57:af:21:73:ce:af:
                    28:99:19:fe:74:1f:75:6e:d0:88:2b:5c:c3:7c:89:
                    7a:00:c1:e8:72:04:93:b6:21:16:f2:a6:44:2a:2c:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:F4:A8:45:5D:5D:A3:6F:CC:CE:14:D0:27:23:ED:D2:EF:6A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl

            X509v3 Authority Key Identifier:
                keyid:9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.204.0/22
                IPv6:
                  2620:126:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:58:62:62:e4:84:d1:66:97:80:ea:dd:64:61:f4:46:89:
         e3:a0:8f:f1:9e:ea:ed:db:ba:1d:e9:b5:61:a6:25:ce:6b:a0:
         94:d1:60:f6:ea:bb:73:39:e0:3f:56:b6:83:a0:d5:a2:cd:9b:
         63:44:97:3a:a7:68:5f:9f:ea:2b:04:00:ce:16:1c:52:dc:19:
         ed:0c:18:bb:61:3d:13:c0:73:8e:32:a0:aa:c3:01:55:1f:f9:
         24:38:59:bc:c3:ec:63:41:cb:7d:e3:11:23:28:ab:2e:a3:56:
         2e:d5:f3:16:21:93:9f:88:1d:14:8b:ac:a7:f0:70:ca:65:4d:
         30:b3:51:3a:f8:9d:a4:97:54:1a:25:69:4f:65:c9:0e:a2:6f:
         73:c3:f3:f3:43:d5:72:d2:45:5c:9d:78:30:35:25:90:8d:96:
         5d:ee:8a:de:d4:bc:1b:de:47:1a:27:7e:13:c2:27:e2:6b:54:
         2e:fe:44:99:d7:ff:c9:55:35:01:d4:61:4e:0b:90:fb:70:97:
         b7:79:86:5a:a4:93:22:8b:3e:db:39:4a:12:0e:99:cd:7a:bd:
         8f:46:29:88:a7:6e:f3:91:4c:93:09:66:c1:da:2e:2d:c2:41:
         91:a2:aa:2a:3e:d3:3c:60:03:2e:f5:78:a5:e1:c3:4a:aa:fe:
         02:f6:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:23:55 2025 by rpki-client