Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
File:                     e8618f4f-7894-3379-ba43-706d25d57bf7.roa (raw, json)
Hash identifier:          0Tn8msMHE1G+yiA6FOqcjjzceobItNhxOVwY9v/HwFs=
Subject key identifier:   C4:BB:CA:FE:03:02:C0:E4:AB:71:92:30:85:51:C0:E8:B7:15:5C:A5
Certificate issuer:       /CN=9696ca72-0d62-4fc3-b383-c596c4f11958
Certificate serial:       010D0C9F4328584B84E777258D44E8456C647500
Authority key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     3562
IP address blocks:        134.252.0.0/16 maxlen: 32
                          146.246.0.0/16 maxlen: 32
                          192.73.208.0/24 maxlen: 32
                          192.160.228.0/24 maxlen: 32
                          198.206.219.0/24 maxlen: 32
                          198.206.221.0/24 maxlen: 32
                          204.238.65.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:77:25:8d:44:e8:45:6c:64:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9696ca72-0d62-4fc3-b383-c596c4f11958
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=7cb3c752-cb8c-4c93-9fc4-52833bb0167a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:a5:9a:9f:45:04:e3:5a:91:a2:8c:0e:ca:
                    46:d7:1c:24:33:31:7d:a5:7d:a7:98:bf:ab:04:df:
                    f3:4d:98:bd:bc:e8:b9:8e:1f:93:8e:ba:04:b5:df:
                    fe:59:ec:29:d9:f7:00:e3:b8:e9:00:eb:2f:ed:aa:
                    3d:d3:fe:86:d3:be:b4:73:3b:80:a9:61:b7:57:8f:
                    03:3e:71:ef:6f:3d:10:6e:b2:d6:29:2f:88:41:a9:
                    a8:52:eb:d6:a3:50:ba:1a:e9:d1:5f:28:43:8c:93:
                    be:cd:bc:fd:16:fd:1b:fe:d9:ad:74:33:4e:ca:9d:
                    8f:12:92:df:aa:e2:c7:38:52:87:79:89:f3:34:5f:
                    9b:4e:6a:5f:44:aa:97:37:bd:91:13:a6:f0:c8:53:
                    a7:57:2d:67:0f:b3:d5:5c:6a:e7:c7:c2:2f:e7:ef:
                    e7:3d:8e:e6:98:07:23:4b:e5:b7:c9:6b:af:54:b7:
                    91:a7:b2:96:38:44:fe:c3:7b:51:ca:65:b6:27:2b:
                    33:1f:68:1e:a3:02:0d:95:7f:44:3d:16:02:b6:6c:
                    32:43:59:92:14:d2:07:1e:b8:a6:4b:2f:d4:74:74:
                    94:10:4c:53:50:a4:bc:a2:5c:6d:3c:62:37:94:e1:
                    cc:ba:49:2b:58:e5:e8:f8:ad:bd:06:a8:56:0a:b7:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:CA:FE:03:02:C0:E4:AB:71:92:30:85:51:C0:E8:B7:15:5C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl

            X509v3 Authority Key Identifier:
                keyid:2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.252.0.0/16
                  146.246.0.0/16
                  192.73.208.0/24
                  192.160.228.0/24
                  198.206.219.0/24
                  198.206.221.0/24
                  204.238.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:05:16:1f:27:93:c2:d7:a0:8d:81:71:92:f0:5f:76:13:03:
         9a:61:ee:1e:f6:b3:1e:67:c4:54:62:17:11:d4:70:d5:56:fa:
         0b:f9:ff:c6:ef:16:26:0c:56:25:55:5b:27:f5:1f:54:cf:f4:
         6d:88:d8:69:27:08:7e:bb:20:5f:07:c6:bd:e5:75:37:47:d1:
         b1:e8:44:7f:41:b6:45:41:bb:60:77:8f:72:31:49:b9:18:97:
         94:4e:49:a9:85:37:ba:60:84:ab:29:07:20:3d:a6:c7:bc:af:
         eb:2a:a4:03:34:88:4f:3a:2e:76:ca:06:e9:9b:09:22:c8:25:
         e4:6f:b4:f0:1d:98:5e:b4:d9:52:53:53:9d:0e:6d:34:5f:c3:
         55:33:d0:0e:88:56:18:b0:d8:b3:0c:49:41:56:e6:e7:49:16:
         ee:90:e6:2c:86:81:86:b9:95:de:c4:df:68:6a:2b:26:14:0d:
         5c:e5:a5:e3:9c:e2:37:b9:8a:70:97:cb:1c:a5:0c:e3:67:6f:
         34:c8:94:13:bc:bd:6e:63:20:4b:98:82:62:9e:99:ca:83:50:
         22:ca:2d:f4:1c:33:d0:80:07:0b:aa:83:ba:23:57:da:75:e4:
         b8:03:ba:77:f7:68:b1:83:15:14:86:04:b3:c4:20:c5:e2:05:
         3e:f7:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:29 2025 by rpki-client