Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/61293ba5-f337-33e9-98fc-eb91d5286a46.roa
File:                     61293ba5-f337-33e9-98fc-eb91d5286a46.roa (raw, json)
Hash identifier:          7ktFiSWgmhzrhxLMct6YTRB/h9p2Pi8mvjdgQR7sj7M=
Subject key identifier:   AE:E5:1B:56:0E:48:72:48:42:32:9D:D0:19:C0:47:2F:6E:02:08:8C
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F4328584B84E778C4483C04C22C904580
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/61293ba5-f337-33e9-98fc-eb91d5286a46.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16509
IP address blocks:        74.117.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:78:c4:48:3c:04:c2:2c:90:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=84f324c2-64ff-4453-b9ba-c45eaef27831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:ca:87:ec:48:dd:c1:f0:29:3e:b8:0c:fa:
                    f0:4b:14:fb:5f:bd:5a:8d:f3:7d:9a:73:78:01:36:
                    c9:9d:f4:57:c5:26:f5:14:f9:74:76:5f:a8:2d:4d:
                    a2:0a:0e:62:c3:d5:62:d0:2b:18:fd:7b:55:3f:73:
                    ae:55:e8:98:58:26:4b:f0:4d:eb:56:47:af:94:76:
                    07:3a:9a:eb:99:49:17:43:b8:91:64:56:df:a0:e4:
                    a1:87:3c:cf:a3:07:91:1f:34:3f:c6:56:04:fa:fb:
                    74:99:be:2a:7a:a5:2f:0b:25:65:02:96:56:16:1a:
                    9b:75:7d:d9:e6:a6:6d:b7:ec:55:9a:3c:68:fa:00:
                    7b:5f:e7:71:b7:f1:3c:26:8f:80:b2:c7:3e:06:fb:
                    d1:d8:c2:29:da:a1:1f:f5:fc:80:f6:1f:b8:d2:61:
                    b7:a2:54:b7:cf:ac:d2:de:fe:81:3d:36:d3:54:72:
                    5c:4f:ab:ea:61:4d:1c:6e:f2:23:37:27:e6:c2:59:
                    74:38:af:01:54:4a:9f:0a:11:e6:e9:de:f7:50:75:
                    d6:5a:b4:18:35:3a:7b:72:1e:27:46:ab:cd:d4:be:
                    32:ed:bb:36:f8:09:1a:00:53:06:f1:50:84:d1:bd:
                    e7:23:cc:35:1a:d7:62:90:8f:ca:17:87:78:88:4d:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:1B:56:0E:48:72:48:42:32:9D:D0:19:C0:47:2F:6E:02:08:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/61293ba5-f337-33e9-98fc-eb91d5286a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:4f:da:52:75:8e:94:9e:71:ca:3e:af:37:ab:bb:10:b8:
         3f:f9:d5:29:f9:9f:80:9a:b9:62:64:28:e6:3d:73:81:29:2c:
         75:a4:38:b6:85:c8:46:4f:66:e1:6f:ac:c5:91:da:c9:3f:b3:
         e4:11:1e:bc:8b:94:89:26:1e:c7:55:4a:48:1c:8b:2f:a4:44:
         b3:b8:ce:98:08:1a:8d:15:19:da:3d:b6:d9:21:7e:45:80:10:
         da:65:ad:97:ee:0d:73:9f:a0:31:9e:62:fc:38:23:14:3e:de:
         3a:25:96:ea:67:9d:1c:01:7e:0b:f1:57:da:13:32:eb:a3:ea:
         69:99:3e:09:fc:fe:a5:64:91:88:6f:10:65:79:0e:c5:1d:3f:
         64:e7:81:33:fd:18:6e:07:d4:69:68:b1:4d:b9:a3:dc:a4:1c:
         c8:ab:15:8b:c7:e9:4d:9f:84:45:21:08:d7:ac:84:92:16:2b:
         b6:ab:90:f6:dc:8a:aa:12:e1:98:e8:81:2f:67:73:a9:f0:9e:
         45:9f:72:eb:c8:26:07:bf:33:7a:55:63:42:b8:ac:4e:02:25:
         87:58:ae:5e:9a:16:c7:24:3a:1d:31:17:fd:10:02:94:59:a8:
         d3:a6:ae:94:a6:18:d4:e9:75:4a:d7:da:3b:4a:6f:48:82:99:
         e2:70:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:48 2025 by rpki-client