Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92161a8e-56c4-3a66-b319-bbc75413bd29.roa
File:                     92161a8e-56c4-3a66-b319-bbc75413bd29.roa (raw, json)
Hash identifier:          ZG8KKrCjLoiBGFArFSlFG3IeofWanUoU2wy6O4dOloI=
Subject key identifier:   0B:56:59:6F:38:7D:E1:D3:F5:F0:40:FF:C0:DF:D8:C2:18:F3:2F:F7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE86F2E0AA7B82BE7C280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92161a8e-56c4-3a66-b319-bbc75413bd29.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.189.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e8:6f:2e:0a:a7:b8:2b:e7:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=629ba11d-d9dc-4e0f-a18b-398f01701ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:4d:4f:f4:e3:16:04:b0:fc:40:b9:8e:c2:
                    df:57:79:64:fb:0b:3e:53:6f:c4:2e:9a:29:96:a6:
                    9a:54:55:a4:ef:4f:8c:b8:e0:46:41:52:5a:bf:dd:
                    1e:07:47:8d:99:c1:7e:58:f6:75:30:72:10:07:e6:
                    8d:4b:15:1c:44:e8:f2:90:b7:12:6c:ef:c5:5b:10:
                    bc:34:9b:8d:53:0f:8a:5b:ea:2c:a3:59:2e:f3:56:
                    0b:41:ff:90:70:3a:46:0c:66:cf:7c:90:71:bd:55:
                    21:8e:49:0e:98:bf:ca:56:a6:a2:b9:ba:9b:3e:d5:
                    c4:54:bf:b3:35:10:af:30:48:ca:9c:77:f9:6e:5e:
                    ac:db:ce:f5:00:51:23:ed:01:ea:b8:0b:2d:89:1e:
                    ca:d8:42:68:3c:c4:59:94:7d:ba:f2:57:8a:ea:9c:
                    a8:8e:52:69:08:04:f3:c8:7a:74:30:2a:ce:68:58:
                    7b:79:a1:a1:c3:3b:76:e9:ad:fb:bb:a3:b4:6e:36:
                    10:59:3c:85:67:07:74:7f:ce:43:ba:62:1f:a2:b7:
                    3f:f9:fd:f9:b6:c6:c2:6b:ed:8b:0b:d3:46:f1:5d:
                    33:85:b1:b5:c0:61:36:80:35:d7:11:66:a4:98:71:
                    d7:6c:c5:0f:d9:9c:46:71:2a:69:f8:38:18:a2:65:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:56:59:6F:38:7D:E1:D3:F5:F0:40:FF:C0:DF:D8:C2:18:F3:2F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92161a8e-56c4-3a66-b319-bbc75413bd29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:97:82:4f:f5:0b:3e:5a:6c:61:e7:a7:e9:69:bf:58:70:bf:
         3d:b9:1f:57:ee:96:99:75:0c:c9:5d:db:18:61:c0:ff:f1:87:
         cd:95:c1:18:37:b8:aa:f0:a5:bd:68:eb:f6:9f:0e:22:ce:5d:
         d9:bb:f6:7c:39:a0:50:31:d4:7c:3c:8a:fc:12:9a:e4:da:e4:
         28:8f:f4:3b:37:c2:e3:b8:1c:f6:27:1a:89:84:9b:74:11:94:
         c2:42:18:a5:1b:36:75:82:89:e8:a5:45:1f:6f:47:aa:27:91:
         9d:a4:23:31:e8:b1:69:10:f5:1c:76:d0:9d:60:3d:e4:ef:96:
         2e:94:10:0a:4f:e2:39:9c:e6:53:8e:9f:74:c9:d1:f5:94:ab:
         9e:b6:e4:2a:cd:af:82:01:52:01:bd:27:11:b6:79:23:0f:ea:
         29:63:7f:80:dd:9f:f1:ab:64:f8:1b:a8:b5:1e:a0:c6:cc:f1:
         d5:e6:cd:ca:26:c3:64:cd:1c:d6:72:25:09:c9:9e:c9:c4:c0:
         80:ee:31:0f:c8:dd:20:36:df:3c:bf:b0:49:9e:46:e6:b7:59:
         21:18:24:08:a8:18:c4:d0:4c:d7:4c:7c:ef:32:e3:61:13:62:
         3e:33:cc:4a:1e:1e:20:8b:73:83:93:df:74:58:36:09:93:d9:
         fa:d0:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:10 2025 by rpki-client