Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/93584071-cbd7-33fc-8012-0882485b81f9.roa
File:                     93584071-cbd7-33fc-8012-0882485b81f9.roa (raw, json)
Hash identifier:          YkpN3rf+Jq3mWrzC/guf54rvuOy5ftqOMJAWU1Hd38I=
Subject key identifier:   85:12:19:80:8E:A9:32:FE:ED:13:79:26:68:30:C1:90:50:36:F9:88
Certificate issuer:       /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
Certificate serial:       010D0C9F4328584B891766096FF91E884DEBE360
Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/93584071-cbd7-33fc-8012-0882485b81f9.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     397451
IP address blocks:        64.43.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:66:09:6f:f9:1e:88:4d:eb:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=d1f849cd-f208-49cb-8e4d-b7150fde7c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:41:93:b1:35:32:5a:e7:e8:59:b1:f1:6c:
                    88:c3:35:09:d3:f3:fe:91:f4:69:5b:98:39:dc:57:
                    7b:f2:51:81:cb:72:78:81:33:78:f4:9f:ad:a6:67:
                    6f:7e:6e:00:d3:43:f2:6d:51:d8:0d:6a:c7:f9:8a:
                    fb:80:54:39:fc:2c:f1:38:12:f0:e6:12:ad:ef:58:
                    9e:8f:ce:56:f4:7b:53:f7:1b:eb:e2:14:c1:60:43:
                    39:26:ba:30:e2:b3:53:fe:23:81:f4:36:fb:1a:0d:
                    8d:6b:78:a6:56:a3:ef:d0:c1:c3:9d:e0:70:a0:95:
                    5a:37:55:e3:d9:10:5f:3d:cf:31:8f:41:ba:b3:fc:
                    2c:fe:78:bb:28:d6:ea:ae:8f:ea:d6:c5:16:d6:5e:
                    ca:4c:49:83:e4:02:8e:90:23:5e:68:a1:94:a4:89:
                    6d:2b:34:90:f0:85:dd:4d:c0:c2:9a:07:53:24:23:
                    d8:c4:2c:31:39:4f:9d:50:bb:af:2c:04:a0:ef:f9:
                    6f:c3:d6:dd:95:50:aa:b0:c9:01:fd:ad:48:1a:73:
                    99:5e:f1:76:26:04:75:2c:c0:09:39:2e:73:da:6f:
                    43:1d:6e:19:c7:a2:69:35:19:77:e0:dd:57:d7:3b:
                    27:09:6d:9a:23:37:d5:47:91:f4:97:8a:ae:ea:4d:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:19:80:8E:A9:32:FE:ED:13:79:26:68:30:C1:90:50:36:F9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/93584071-cbd7-33fc-8012-0882485b81f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.43.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:ef:0d:da:d0:35:00:1f:0e:08:f7:7b:e1:89:84:db:a7:
         5b:ae:f8:12:ea:8d:b5:e7:eb:e0:f8:e8:37:d4:d8:9c:5c:bd:
         11:8e:40:b4:0c:e1:68:bc:52:c4:31:21:8d:88:d8:7d:10:3e:
         cf:19:f4:38:a6:f9:e2:e5:78:a0:b3:c0:65:a0:d3:d1:e7:22:
         d2:50:b2:c8:4f:42:d9:46:ae:36:89:60:ab:f3:2c:4d:20:16:
         c9:f1:78:7a:bf:24:23:d2:ba:c2:3e:e2:b4:81:b8:a1:57:07:
         f8:bb:75:f2:28:62:fc:55:40:07:01:90:b2:c2:27:20:5e:2a:
         b5:8a:bf:c3:29:a7:56:3e:1e:63:e6:97:8c:34:5f:b7:77:4b:
         4a:97:fe:7f:5e:03:3e:f1:a1:28:66:ce:15:69:eb:69:8b:ab:
         dc:1b:f4:b5:83:cf:8d:54:21:f3:4d:f5:15:53:f2:ee:11:52:
         34:51:1d:88:47:75:c6:d7:d7:a4:f4:2f:35:a8:6b:f3:40:2e:
         8f:49:27:a1:02:7c:bd:07:d5:38:c3:d0:61:47:b9:25:44:71:
         8d:6c:a8:09:e2:a1:c3:90:73:44:12:09:ea:9f:ca:98:08:f3:
         d6:31:e7:22:4d:21:76:27:1b:66:24:61:db:8b:29:7d:c1:14:
         69:6b:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:29 2025 by rpki-client