Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06ed4d83-2c93-3d3f-8bad-02b9d8e2dd12.roa
File:                     06ed4d83-2c93-3d3f-8bad-02b9d8e2dd12.roa (raw, json)
Hash identifier:          thM4phe1oSjWUaPvcp9EZslVGMeaWeTj0t0YFA7aDwg=
Subject key identifier:   34:7E:6D:34:D1:3A:2E:40:36:8C:4F:7F:B4:60:DA:C2:3C:73:08:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E177A77C36CA231D60430
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06ed4d83-2c93-3d3f-8bad-02b9d8e2dd12.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        159.111.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:17:7a:77:c3:6c:a2:31:d6:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=925273b6-8d27-4dd0-9239-97ad71cd629e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:28:38:82:a7:b6:70:e8:84:05:ac:b9:e8:
                    81:ff:ca:bb:89:b7:85:f0:b0:b4:ed:8f:2e:e4:a4:
                    24:52:f0:8d:32:13:31:76:18:b2:17:ac:88:6f:b3:
                    2f:83:9a:f0:e6:52:f6:2f:d4:53:6c:d6:07:fe:b0:
                    05:94:ec:fb:f7:1c:e6:8f:6f:63:cb:6b:20:77:c4:
                    b5:b5:3a:d3:16:3d:6b:04:e6:ae:38:34:4f:ee:7e:
                    6c:0e:10:07:24:db:c2:2b:e3:f0:73:94:0f:ce:90:
                    ef:d3:2a:d5:d9:22:2a:91:1c:8d:ce:5d:c8:2c:ea:
                    07:f7:b4:04:8b:aa:bf:ba:63:d7:d2:b6:77:93:aa:
                    a0:b0:0c:db:27:ba:e3:c0:9f:d5:87:a0:d0:58:cb:
                    e4:b0:0e:f0:a2:bf:f1:25:df:7f:da:e5:ca:d4:86:
                    12:a3:0d:07:e1:a0:a2:52:2a:5c:0a:5b:1e:5a:d8:
                    36:4e:ed:6c:4e:fe:ff:4f:2f:32:83:27:c1:3c:1a:
                    74:b8:c3:2e:31:7e:a6:18:ee:c9:a3:47:67:91:71:
                    e6:db:b5:56:73:5a:17:06:d5:55:2e:b7:0b:9d:b3:
                    6c:86:f1:a9:63:82:60:b6:85:c0:01:9c:60:88:24:
                    57:db:ca:55:e5:27:b4:c5:6d:9e:25:4b:f1:8b:9c:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:6D:34:D1:3A:2E:40:36:8C:4F:7F:B4:60:DA:C2:3C:73:08:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/06ed4d83-2c93-3d3f-8bad-02b9d8e2dd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:82:2f:04:b0:84:2f:33:bd:25:b5:69:14:0b:23:eb:61:
         95:6b:24:30:5d:3b:ee:cb:24:b8:9a:9c:0e:44:9f:53:f9:fa:
         cd:fb:f9:04:7f:fe:43:c5:1a:f6:4f:03:6d:59:07:4f:ed:8d:
         b2:ae:99:d5:19:4d:24:4c:c4:05:51:a2:7c:d2:6c:2b:ee:2e:
         1d:23:b6:05:dd:46:60:8c:9a:02:9f:5f:11:37:87:02:d1:d6:
         fd:07:b2:17:14:d7:ce:33:ca:bd:cb:e3:7f:93:27:6b:16:2b:
         96:7c:ad:0c:b5:b1:13:f1:4c:80:a0:9a:c0:f6:68:fa:10:4c:
         15:c9:f9:49:2b:87:0d:5f:a2:51:d7:aa:81:02:23:80:2f:c5:
         a1:32:3c:4f:07:68:49:f1:8f:27:41:6e:8c:31:26:c5:3c:7f:
         d3:eb:3c:51:0e:8f:a9:16:dc:6a:73:4c:b1:b5:d7:cf:86:c7:
         66:e8:b4:b9:40:8f:d6:63:31:08:27:0b:66:29:2e:14:2a:54:
         54:10:75:05:61:51:09:b1:4d:71:74:cb:35:d0:84:a4:93:34:
         df:5a:30:58:a0:b5:3f:20:7c:7c:af:a9:db:d0:e0:47:28:8e:
         09:e9:ac:ba:a0:2a:55:82:41:f7:be:3c:33:56:23:0c:f1:89:
         e6:78:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:22 2025 by rpki-client