Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/173ffaf8-e96d-3266-8766-38a1c0e05fae.roa
File:                     173ffaf8-e96d-3266-8766-38a1c0e05fae.roa (raw, json)
Hash identifier:          +7OFbhfp9zM/xFwmLd7gQhBN4IOCpwMsMRaMMQlD9aM=
Subject key identifier:   E0:B4:D3:4F:93:1D:17:06:DD:94:ED:DF:E9:32:5A:81:5A:CD:4F:06
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC98AFBF535DDD5A75540
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/173ffaf8-e96d-3266-8766-38a1c0e05fae.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19115
IP address blocks:        170.151.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c9:8a:fb:f5:35:dd:d5:a7:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fdcc4a2d-a3df-4662-95a5-9c07063b1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:c1:ee:ac:ab:4f:3c:e2:47:98:fa:67:c2:
                    47:c6:41:b1:d6:1a:cd:74:ec:0a:f2:42:c1:ca:f8:
                    9e:33:66:49:bd:0b:86:7e:59:f7:eb:91:01:c3:30:
                    28:12:fe:e4:4f:c1:cd:4f:b8:4f:6a:f3:6b:1e:58:
                    12:48:69:e3:39:4a:61:c7:ed:6e:07:46:e5:f7:01:
                    94:a3:e2:a3:2f:a4:66:ec:b3:0e:c8:a7:95:da:57:
                    55:66:7c:16:86:46:f0:70:63:29:a1:2a:98:3e:11:
                    f4:17:28:ea:13:5b:8b:8e:31:c7:e5:e7:e0:f6:31:
                    28:56:f9:ee:f3:4c:a0:49:63:a5:5a:7d:3b:2e:27:
                    88:b8:1b:87:e2:ae:ca:02:35:a5:85:0e:97:c4:08:
                    38:ab:07:52:8d:83:f6:0c:fe:f8:dc:e4:2b:6d:a7:
                    44:aa:ab:59:e2:88:74:c1:b8:3e:d7:90:42:7e:f2:
                    21:d9:0d:6a:9e:ce:ba:65:01:38:57:28:b1:e0:d4:
                    60:82:51:c5:cd:46:f5:37:c8:38:f1:09:11:ed:c4:
                    a3:f7:7a:ae:40:e3:51:3c:a9:84:18:f7:f1:85:62:
                    bf:43:74:9b:c8:ac:d1:04:2b:eb:eb:b0:1a:ac:fc:
                    d4:68:e1:96:21:68:30:c9:84:e1:4e:bc:2b:69:3b:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B4:D3:4F:93:1D:17:06:DD:94:ED:DF:E9:32:5A:81:5A:CD:4F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/173ffaf8-e96d-3266-8766-38a1c0e05fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.151.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:9e:02:cb:5b:b0:5a:86:7f:a3:70:78:cb:c9:c3:4c:05:
         80:57:63:a0:e0:80:0b:6c:cd:12:3b:d7:e5:14:75:1d:01:d6:
         62:57:4c:df:d5:df:ce:db:03:1e:1e:ea:d5:c4:e7:03:97:91:
         42:0f:07:fb:98:7b:df:df:79:c4:d5:8b:cb:b3:6e:bc:80:ba:
         28:bf:26:96:f3:43:cd:f2:b8:58:03:2b:2b:16:7b:b9:01:1b:
         4c:50:08:ba:08:31:ca:a9:5e:24:ab:09:25:15:0d:fc:fa:60:
         98:2d:49:23:3c:d4:31:c2:bf:1d:63:d9:74:e6:c1:a9:bf:35:
         ac:88:1b:4a:3a:fa:19:ca:8d:a2:8d:4b:94:87:42:a8:27:91:
         57:b3:42:a3:97:3c:31:b0:71:dd:e7:ee:08:c3:fc:71:d1:1e:
         9f:d4:37:16:d4:ee:be:22:4c:14:eb:57:df:ed:bc:ab:5b:07:
         e7:5a:0b:01:35:3b:91:fa:7f:c0:f2:2d:8f:99:dc:06:eb:19:
         06:a7:9a:d7:f2:cb:e3:39:72:fd:63:16:20:88:74:35:b7:38:
         d9:c7:58:f3:cd:80:8f:07:11:11:05:d2:22:71:34:85:ea:d6:
         26:d1:1a:17:e5:2e:1f:d5:ed:cb:b1:35:7c:80:7a:aa:d0:9f:
         79:d1:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:08 2025 by rpki-client