Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11daa202-1f19-3e69-a61b-c23bcb1ad667.roa
File:                     11daa202-1f19-3e69-a61b-c23bcb1ad667.roa (raw, json)
Hash identifier:          cVYxnTVyEaJ8EnDPo0QTp+9+QUY7+NL4Aob/Y6iqpNI=
Subject key identifier:   DD:4F:FF:1B:9C:8E:0D:FD:69:C6:B0:30:E0:5A:DB:82:B6:17:19:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D687295F3C49C825A9F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11daa202-1f19-3e69-a61b-c23bcb1ad667.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.94.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:68:72:95:f3:c4:9c:82:5a:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b619670a-4638-44d5-bc13-a5c19502187e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:d2:a3:45:a6:ee:dc:38:5b:58:93:35:19:
                    f3:d3:cf:cf:b5:7c:ec:3c:cc:d2:98:1a:15:e5:0f:
                    a6:aa:b5:d6:15:27:57:48:12:07:45:cc:c9:ef:42:
                    e4:7e:d1:1f:b8:26:e0:39:34:2f:0b:d0:1c:db:e1:
                    db:ce:27:e1:d5:40:5a:9a:b2:c5:96:f9:0c:37:e3:
                    18:74:d7:c9:59:2d:3e:8e:2f:ac:a7:bd:8a:d7:c6:
                    67:65:cd:6f:a5:ab:7a:7a:4f:de:aa:da:f5:77:e3:
                    bc:51:f1:87:fe:89:1c:d5:41:7b:fe:01:15:16:61:
                    f3:77:08:c3:08:05:63:fc:09:61:1d:d9:d9:72:ea:
                    8e:dd:04:e2:ae:19:a5:88:a1:f2:18:02:33:2e:1c:
                    45:28:7e:c2:48:8b:00:ae:40:ea:e1:8d:09:e0:a4:
                    bd:d1:99:49:88:c9:da:46:14:75:e8:3c:2d:b5:35:
                    f6:42:8f:c5:ba:a3:2a:7f:53:d0:1e:51:ad:87:4f:
                    20:c5:e8:19:2f:27:3b:1c:b9:84:00:69:23:65:da:
                    49:80:39:64:33:1e:be:cf:18:55:51:3f:0d:3c:c9:
                    0e:35:6c:5f:1f:b3:cc:ad:5f:f5:fe:36:de:fd:09:
                    f3:cf:67:19:b0:0f:1e:fb:ad:5a:3b:0c:0b:c3:a2:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:FF:1B:9C:8E:0D:FD:69:C6:B0:30:E0:5A:DB:82:B6:17:19:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11daa202-1f19-3e69-a61b-c23bcb1ad667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.94.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:00:60:75:2f:42:ea:af:96:19:40:bc:59:a4:c4:4b:d1:f7:
         51:96:6f:a0:1d:df:a2:47:c7:19:98:ba:48:8d:7c:22:5b:04:
         1e:66:18:1f:6f:54:e4:f7:e6:9f:7e:ea:7a:3a:b6:cb:1a:17:
         e2:b6:a4:e6:e5:5c:89:cc:55:23:31:12:0e:40:c8:46:e7:aa:
         f8:94:40:b7:6b:ff:a0:e4:77:1b:53:32:b7:b4:63:71:b8:fd:
         17:eb:5a:f6:5b:01:45:34:c3:59:64:19:e4:33:f8:a9:88:b5:
         12:8f:e8:18:11:f5:02:59:c8:87:e8:2b:bc:5f:a4:be:73:c9:
         d1:06:e2:5a:55:fd:1f:c8:99:52:86:25:72:7a:ac:23:5a:a9:
         e9:f1:be:fd:ad:1a:32:a1:76:f0:f9:44:d0:b7:e0:7a:57:28:
         f4:1e:d7:ed:20:14:0d:f3:ed:ab:66:5e:3e:53:23:a5:6b:90:
         10:12:1d:5b:ab:0e:e4:e3:ca:d7:96:00:8f:50:b6:59:8a:25:
         4d:cd:4d:1a:8e:6e:e9:71:f3:96:f4:7c:07:4e:5b:c0:03:f6:
         ff:68:fb:0a:9e:26:f6:a0:94:51:5f:94:7c:b2:63:e8:bb:93:
         e1:3a:4b:82:a2:b1:b8:49:26:9d:ea:e5:16:93:c3:70:8b:ba:
         fb:a7:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:36:16 2025 by rpki-client