Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
File:                     1c2caecd-5d24-3447-b3c5-116394c1a96e.roa (raw, json)
Hash identifier:          yyEQyQgckS/pMwozgu8wPDYyKmt0JLbZ/eUjdWZoA3I=
Subject key identifier:   28:9D:1F:3E:19:5F:BB:5F:D9:55:F0:79:5C:F7:98:22:07:C0:DA:2A
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584B5DD1EE8AE4B9002AB819BE40
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        166.98.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ee:8a:e4:b9:00:2a:b8:19:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=67cf2f88-1166-40b8-bf44-b10208398435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:80:56:8c:63:e6:58:21:eb:0f:ce:d3:e6:
                    e8:4f:5b:b9:fd:b7:87:4d:18:f2:74:51:73:b6:cb:
                    b9:c6:c8:59:6f:a4:81:4a:f0:cf:4d:46:83:02:8f:
                    2c:e0:b6:0a:05:f3:2f:4f:03:62:fa:08:4b:88:42:
                    79:9f:8c:b1:3c:00:96:ca:91:a5:14:df:83:6b:19:
                    e5:2d:24:f0:2a:e0:e1:fd:9b:68:28:1c:39:d9:95:
                    e6:ef:4b:37:ef:f4:0e:65:c5:43:1a:cf:17:af:09:
                    bb:96:7f:df:04:b2:66:a5:8e:83:0f:9f:71:b9:63:
                    b0:bc:eb:59:96:01:be:59:d1:03:92:df:7e:da:3a:
                    08:ef:66:a6:19:37:60:1d:68:9f:2a:6d:54:82:6d:
                    e5:9e:93:07:0e:59:09:cb:24:c5:b2:9d:e8:40:f8:
                    29:4b:0d:0c:1e:50:2a:cb:6e:65:91:44:fb:b5:af:
                    98:db:0f:f7:ed:43:f7:d5:cb:69:fb:61:54:5c:ab:
                    bb:1b:0f:6d:6e:36:1f:b0:44:a2:cb:d5:ff:2e:ab:
                    11:a4:f7:78:eb:5d:6f:76:fc:0f:15:92:c9:f5:f3:
                    35:8d:a7:2d:ca:a2:f4:33:2f:7b:e4:23:21:72:b8:
                    e4:fb:ad:d2:a0:a1:72:42:39:8f:e9:c0:9a:f5:ec:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9D:1F:3E:19:5F:BB:5F:D9:55:F0:79:5C:F7:98:22:07:C0:DA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/1c2caecd-5d24-3447-b3c5-116394c1a96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:62:ad:a8:a9:84:71:eb:c2:92:e1:89:b1:bb:c7:8a:e4:8c:
         30:6d:e4:71:01:d0:82:62:1a:46:26:a6:87:76:9c:fc:18:44:
         ed:65:58:47:6a:67:ec:7c:5b:48:a8:da:ca:96:6f:f2:17:53:
         9b:32:d7:0c:ac:0c:d8:cb:a3:db:a0:b4:33:fe:90:b3:6f:86:
         90:f3:37:aa:19:2b:2c:af:6b:b5:99:56:ee:31:d6:c3:a2:61:
         49:59:1d:8b:de:da:b1:9e:66:94:d5:d0:ea:10:0f:24:51:3d:
         f6:ab:60:63:47:df:ff:2a:28:55:38:39:f3:12:55:35:94:c9:
         e3:28:de:18:1a:18:8c:0b:c8:f7:00:0b:56:fc:6c:4e:07:0a:
         ce:8a:ff:e2:e0:03:f1:da:d2:48:2d:7a:57:88:8a:31:b1:01:
         6b:1f:43:55:98:f7:4f:21:b3:88:95:bd:11:52:8d:f0:0a:65:
         1c:29:b0:66:32:03:30:ef:e4:f4:ef:42:57:25:cb:b6:0c:17:
         9d:54:8f:da:07:f7:a7:94:09:78:99:97:85:e0:df:32:7b:12:
         5f:b8:68:e3:d1:93:5b:e1:34:be:d0:23:bb:87:0e:bc:c2:73:
         d5:6e:0c:db:fa:8c:50:6f:55:fc:42:19:4d:6b:46:70:44:28:
         38:2e:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:32 2025 by rpki-client