Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa
File:                     147a8d4d-0dc9-384e-be97-33286b2473cc.roa (raw, json)
Hash identifier:          /a0qHFNXzVlDL3YPhENzItILNvEpK7GzYgUtca1fvSk=
Subject key identifier:   1A:3F:4E:4B:5E:DF:41:E7:45:3E:71:34:19:CE:55:7A:6A:01:4F:99
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC61D5B40A77A6B508400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        192.60.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c6:1d:5b:40:a7:7a:6b:50:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fdb27bc2-3783-4d9b-a0fb-868ceac66358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:7c:cd:3b:ae:a6:ae:01:d6:85:ac:99:73:
                    50:e0:bc:97:9a:eb:c9:28:de:fb:5f:db:66:65:c9:
                    e7:3d:c2:f1:d9:63:4a:40:5c:37:7d:32:a8:69:24:
                    db:8d:39:7b:0e:aa:2e:36:d7:cf:af:11:39:82:a4:
                    da:10:60:e0:fd:39:e6:fe:53:98:7c:46:31:a0:70:
                    8a:3d:f2:1e:d1:24:51:f1:f9:08:08:a6:37:5d:35:
                    35:ed:01:0f:4e:e8:9a:0c:77:8f:3a:c0:7f:28:cb:
                    cb:37:df:b8:ed:01:c0:c5:cc:fb:ed:25:bb:2d:7c:
                    f9:b5:28:1b:e1:0f:03:ed:72:32:e4:05:6a:d3:05:
                    5f:d1:fd:4b:ba:cc:e5:07:8e:3f:3c:32:11:83:42:
                    03:8f:5d:4b:21:bb:03:34:46:43:57:b7:3c:68:66:
                    cf:6f:3c:e0:b4:2e:75:1c:df:f4:1a:ab:3d:a7:03:
                    a9:a5:c7:f8:74:e5:37:20:f6:bc:e8:4e:62:ad:54:
                    02:8b:4e:03:b8:62:e4:6b:24:7e:35:72:4d:87:00:
                    a5:f6:f6:c6:de:b0:98:93:8b:31:fd:76:ab:98:32:
                    5f:19:9d:ce:c6:12:24:a6:eb:0b:4e:d0:0a:d3:bd:
                    b2:0a:d4:47:f0:53:60:2b:7d:82:1a:5c:70:2d:bb:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:4E:4B:5E:DF:41:E7:45:3E:71:34:19:CE:55:7A:6A:01:4F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:c8:0d:b8:81:fd:8f:6d:74:32:c1:69:09:e8:de:dc:a0:
         1e:0b:e1:f5:73:fc:95:3a:3f:6f:71:0c:c3:f8:df:a3:c9:cd:
         45:12:06:c9:19:0a:74:e2:de:9f:63:9d:42:97:f1:ab:52:05:
         4c:e0:0d:26:0f:72:27:7a:d2:4e:af:69:c8:a4:9e:8e:fb:db:
         11:f6:b8:ca:94:70:25:b7:03:2c:87:0c:bb:70:4a:a2:49:76:
         e8:76:c4:a4:83:7f:ed:dd:59:2e:c8:a2:1f:ce:8a:ea:96:f7:
         8c:35:72:6d:c8:6a:57:0b:2c:e1:c2:14:97:e4:27:0a:5b:ba:
         19:38:ce:04:a9:89:40:08:78:4f:1f:07:3f:a8:1e:ec:da:cf:
         60:9a:b9:33:70:df:60:82:04:fb:ed:3a:a2:1f:2e:fa:27:71:
         b0:05:69:d1:d8:2a:64:36:c7:6f:3d:cf:c9:77:19:e5:44:45:
         bb:fa:9f:9f:a3:af:02:b3:13:96:19:60:c3:3c:4d:37:a2:10:
         c2:e8:9d:76:af:cb:aa:1c:94:64:ca:ca:94:01:60:0f:02:4e:
         f3:87:41:f4:04:3d:33:f0:f8:d9:7d:de:6c:87:e9:fb:e8:47:
         87:83:c4:3b:41:0c:db:a4:45:65:93:0f:ce:d7:b7:23:17:03:
         b8:89:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:38 2025 by rpki-client