Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/59fd3a20-194d-3e48-8b72-2b52dd106685.roa
File:                     59fd3a20-194d-3e48-8b72-2b52dd106685.roa (raw, json)
Hash identifier:          hmIOHkxBKGpfCdGErg/vTux55Oai7uyJkPVYN5vvwpE=
Subject key identifier:   18:0C:ED:CE:EE:1D:B9:88:A4:B5:65:BC:B0:6A:03:93:11:1A:5B:67
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584B2CF6DD162C4BEC118415DD00
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/59fd3a20-194d-3e48-8b72-2b52dd106685.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6507
IP address blocks:        162.249.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:dd:16:2c:4b:ec:11:84:15:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e0f6451d-2ea7-45ac-9360-378cca9d5b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:30:06:8c:e5:cf:25:96:af:9d:d6:a0:54:
                    7b:be:3b:00:86:22:aa:d8:17:10:00:6c:e8:22:5a:
                    df:15:ef:e1:d2:38:96:fa:ab:fd:09:f5:d2:53:1e:
                    f0:68:61:05:71:63:a3:2c:68:7f:a5:e1:f0:32:af:
                    87:cf:5a:73:57:e7:da:2c:ba:ca:2e:4f:25:2f:f9:
                    74:f8:e7:81:60:6e:ac:bd:8f:e0:f9:1b:e2:ff:a9:
                    69:35:ba:a1:e8:2b:bc:db:1a:6a:44:6b:4d:08:ff:
                    f9:f0:fc:3a:5f:eb:42:2e:42:28:ab:f9:39:49:f5:
                    b6:d6:2d:66:7a:fd:f2:0c:97:e1:2f:00:3c:ee:b8:
                    b4:41:d0:f3:74:67:c0:3c:8b:c0:c6:72:84:39:7e:
                    69:23:1b:3f:de:f4:e7:e5:9b:a6:8c:4c:5e:b4:b8:
                    a1:b7:d6:46:31:38:69:8e:9c:52:f6:fb:0c:c7:74:
                    0b:c8:76:11:07:65:69:d8:9a:bc:c4:03:4b:a8:fd:
                    58:15:29:c9:27:b5:84:f8:80:85:83:3e:a0:b5:2e:
                    ec:34:92:6f:89:ad:7f:88:ef:29:f9:93:d1:9b:59:
                    3e:50:4d:e1:4e:c5:97:5c:05:35:36:7e:db:af:df:
                    20:46:61:8a:91:28:e0:62:b6:fe:72:a5:3e:cb:1a:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:ED:CE:EE:1D:B9:88:A4:B5:65:BC:B0:6A:03:93:11:1A:5B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/59fd3a20-194d-3e48-8b72-2b52dd106685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:85:da:10:ba:02:74:51:e5:44:8a:9f:ee:3d:8a:b4:8b:fd:
         8f:d9:31:cb:f0:f4:2a:c9:ef:aa:c1:d2:d9:41:51:2c:a9:e0:
         26:ea:fe:d6:db:b5:15:22:ae:c4:41:f6:74:1c:2e:44:73:90:
         07:fb:15:23:b7:9b:0d:61:30:f3:bb:f4:5f:50:7e:19:a7:e4:
         07:4b:76:ad:0d:9f:a1:8a:90:ed:a9:83:15:6a:e0:9c:0f:45:
         7e:e1:3c:bd:63:bd:81:fc:ec:80:49:5c:91:50:5f:08:ea:7f:
         f0:77:91:90:4f:d7:80:89:9a:ee:dd:70:69:a2:16:24:3b:7c:
         1a:83:8e:b4:a0:0a:f6:f9:62:9a:4c:1e:16:8e:18:f7:af:b4:
         7f:a2:a0:2b:7b:5d:ce:a1:57:0e:69:6d:1a:3c:6e:ee:c6:dd:
         63:80:54:a9:69:74:b9:6d:c2:c8:39:49:c4:50:47:d2:60:30:
         c6:82:3a:8d:9e:2b:08:10:fc:a7:7b:68:f2:2c:28:7f:89:3c:
         6a:96:3d:67:d3:24:8b:3d:9a:78:45:5a:32:62:ff:c0:41:87:
         1d:ac:ee:0b:2a:86:02:15:4c:2c:ee:73:bf:58:98:22:7b:90:
         25:99:df:a2:d9:82:0b:79:ea:7f:14:6e:e9:af:87:20:9f:4a:
         60:17:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:07 2025 by rpki-client