Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6a45014-0012-37ea-a2d1-d21fc79106ee.roa
File:                     a6a45014-0012-37ea-a2d1-d21fc79106ee.roa (raw, json)
Hash identifier:          ZYVDHrD3plB/B6NxgYwtn9kkqRf3eG6MxTYxf/sTZD4=
Subject key identifier:   42:15:90:F0:5D:1C:33:69:BA:16:8C:CD:72:CA:74:9E:F5:DD:43:1F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7F19736AD8E3C88C1C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6a45014-0012-37ea-a2d1-d21fc79106ee.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     62719
IP address blocks:        144.129.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:7f:19:73:6a:d8:e3:c8:8c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=72bff7a0-9d3f-4302-a847-e258089bdf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:f5:89:2f:e5:65:47:46:f1:56:b9:73:4e:
                    eb:00:d8:40:8f:bc:f6:2e:f7:f8:bb:69:ae:9b:8d:
                    03:86:14:5c:84:b4:5c:c6:6d:96:45:f0:8a:5a:2a:
                    22:e4:5b:fa:a3:b1:ee:d5:cc:bc:f8:bd:c9:f7:94:
                    c0:78:38:3e:2d:5d:eb:b8:96:2b:25:58:50:7a:ee:
                    09:3e:f7:ad:b8:9e:3f:40:a5:b9:78:a5:e6:7b:7d:
                    58:a1:4c:23:ea:6e:02:0f:a7:12:d8:f5:ea:29:27:
                    89:10:69:9d:eb:e9:66:d4:77:04:fe:71:75:be:2a:
                    aa:c4:69:0f:77:5e:5c:c5:4c:77:2c:2c:72:85:82:
                    c0:29:07:78:9e:af:1a:41:00:22:44:e0:70:a3:ef:
                    c4:6f:58:e9:81:53:07:57:23:50:65:44:2a:b7:5d:
                    3c:82:d3:dc:c2:73:f2:e4:76:97:fb:1e:a9:1f:a7:
                    28:d1:16:18:2a:f5:9b:cd:f6:10:54:26:92:94:ea:
                    11:b1:ea:33:86:7c:db:cf:06:7c:83:7b:58:31:cb:
                    22:15:07:6e:f9:3c:25:cd:ee:bb:46:08:71:8d:82:
                    78:2c:d7:20:c3:47:50:45:1b:d7:00:ee:a6:c6:55:
                    26:9b:39:a4:c1:ba:29:8e:47:53:3a:38:a2:cd:51:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:90:F0:5D:1C:33:69:BA:16:8C:CD:72:CA:74:9E:F5:DD:43:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6a45014-0012-37ea-a2d1-d21fc79106ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.129.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:74:7b:13:1a:df:63:5c:ae:88:30:f6:25:99:d1:c1:77:ed:
         8c:ac:2d:05:af:6d:fd:65:f0:59:26:aa:50:b8:ba:92:65:49:
         f6:f3:43:91:ba:55:ba:cb:ad:21:29:00:ba:0f:4b:7d:e7:81:
         39:35:1e:94:2c:dc:68:27:18:00:ea:5d:76:c2:86:e8:5b:c3:
         04:63:6f:7e:69:19:31:12:31:69:f9:9d:4b:4e:69:0f:5e:3e:
         5f:4d:13:86:0e:42:dd:61:c2:8d:12:a3:b0:67:08:8e:a8:6d:
         52:df:df:ea:00:d6:e1:88:ac:8a:c6:e4:0b:99:e1:a1:a7:1f:
         a7:fd:7a:2e:6b:86:12:89:85:f3:08:e2:84:bc:ce:7b:db:67:
         d2:6b:d6:ab:a9:af:d6:30:6b:7e:1b:02:0b:98:58:20:11:bd:
         9a:9c:5d:f2:ed:43:b7:92:86:b0:83:b7:df:bb:80:6e:1d:3d:
         df:ec:4a:20:0a:fa:8e:69:74:71:9c:7f:82:58:67:3a:d5:b2:
         40:9b:71:df:01:70:f4:b1:6a:38:67:20:c9:34:9a:84:57:f7:
         4c:7f:d6:0e:03:7a:79:af:96:a9:35:c6:b1:5c:ae:2a:bb:30:
         b0:d2:00:76:06:ae:f3:b9:69:ef:f7:aa:0d:a6:06:d7:4a:be:
         a9:67:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:25 2025 by rpki-client