Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
File:                     c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa (raw, json)
Hash identifier:          XbGa1P0RSLVy524r4qbeaugBb0hdORraFXghxVO1pFs=
Subject key identifier:   61:18:AB:0E:78:93:F7:F0:70:34:B5:33:F9:6E:B3:FF:10:AC:D9:B0
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B8EACE570136DB38B3A9884C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     2734
IP address blocks:        66.128.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e5:70:13:6d:b3:8b:3a:98:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=8a2f2bcf-56bb-429f-9818-5b113af19e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:f6:16:a1:a9:56:46:10:11:48:e6:41:d7:
                    7f:55:70:c7:74:66:d7:a2:40:10:6a:d8:58:b4:9e:
                    f9:91:db:35:f4:73:c6:13:13:46:a1:0f:e6:68:0d:
                    6c:a2:6f:8c:3f:99:4c:71:71:23:37:53:f5:ab:63:
                    ad:30:8d:1c:cf:00:d9:c9:ae:66:0a:9c:8f:b7:ac:
                    cc:53:aa:34:e3:66:8c:de:58:40:c2:6a:e9:11:2d:
                    1d:8f:8f:f0:ae:c5:11:c0:35:fc:ab:c8:fc:10:ed:
                    af:42:fb:e5:93:40:0b:5d:4e:7b:9a:e8:97:b2:37:
                    ef:30:13:66:45:29:84:28:34:bc:fc:21:25:7c:ea:
                    fe:ef:3a:e5:df:70:bb:9c:03:d2:cc:9c:92:2e:a7:
                    9c:63:47:f0:a7:36:29:95:53:f1:37:58:06:6b:7b:
                    4e:cb:9d:c7:d3:98:4d:85:17:48:61:0d:ea:7a:1b:
                    a2:1f:29:62:27:b9:96:2d:b9:a0:d7:21:7b:97:d5:
                    97:24:dc:5c:ce:45:d1:37:0b:07:e9:27:67:c0:02:
                    de:11:f9:b3:ff:2c:af:b1:a2:9e:d5:c1:99:13:b2:
                    79:cc:0d:f5:ac:fa:54:c6:40:98:0d:64:a9:98:3e:
                    d8:f7:08:cb:17:86:6e:c2:f3:fe:d4:09:07:83:be:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:AB:0E:78:93:F7:F0:70:34:B5:33:F9:6E:B3:FF:10:AC:D9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:06:66:27:e0:49:e8:4e:ac:60:af:1c:9a:91:8b:79:27:
         98:e8:c9:c5:e9:21:58:1e:68:1e:da:f3:fb:58:6c:98:1d:5d:
         77:d8:36:89:06:54:cd:13:22:59:19:7f:49:06:a9:94:67:d3:
         27:a0:d1:5f:bd:bf:16:62:85:71:d3:df:a8:f9:4a:4d:94:a2:
         44:eb:11:ec:74:b9:3e:b5:47:2e:a8:6f:c0:00:5d:b0:a1:6c:
         b7:19:4c:a6:16:2a:12:30:5d:68:ca:77:a5:8a:a1:cd:2a:93:
         13:20:c3:b4:ff:ce:ca:d8:29:91:a2:0f:c9:ed:13:66:47:1f:
         73:4e:ae:89:7e:e7:30:99:7f:e6:31:49:6f:b4:ac:5e:75:84:
         12:d1:f8:42:e3:17:03:c6:bd:69:f4:fe:2b:07:e9:e7:93:33:
         50:3c:95:b7:0c:0b:81:8b:2f:83:74:94:92:c7:2f:e0:24:d8:
         6e:3f:b2:f1:f0:df:52:17:16:c8:62:46:9a:0f:82:c0:d7:5a:
         32:b4:d9:b6:ff:78:24:b1:a2:e6:d4:05:d1:80:7d:93:d7:77:
         ea:d4:bc:d2:89:0c:d7:24:73:59:39:6f:af:17:79:e5:36:28:
         d7:f1:9b:b8:94:e5:ce:b9:b0:74:76:ed:30:28:1d:b6:eb:af:
         f6:ae:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:43 2025 by rpki-client