Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
File:                     1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa (raw, json)
Hash identifier:          LW+tybXUqZ4Ntgz+0wW+wFcQyqDDwAaHsaLwvdU9dMY=
Subject key identifier:   B9:C8:B0:E1:CC:FA:2C:8B:58:9C:EF:CF:6B:5C:BD:E4:04:BF:6C:5E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584BA39D2834F0719D253EB2B980
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     394089
IP address blocks:        74.221.128.0/24 maxlen: 24
                          130.41.132.0/23 maxlen: 24
                          165.85.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:28:34:f0:71:9d:25:3e:b2:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=f4acb4da-591d-40d1-963e-dd3c088e1281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:21:29:70:52:1f:61:af:04:e5:d1:1e:21:
                    3c:11:bb:4f:ac:ab:af:22:af:78:26:a2:b5:dd:ba:
                    3f:7f:13:48:03:a7:a5:45:ca:b6:4f:66:76:02:72:
                    50:70:56:e8:3d:9d:83:c1:a5:e5:73:de:96:89:9f:
                    42:f8:e3:b4:76:d6:ba:4c:f2:e3:b0:ee:3d:1f:ea:
                    3e:45:cc:fc:2c:fa:1e:4c:6f:cf:75:f0:0f:81:45:
                    bd:4a:76:7c:f4:40:d9:58:0a:05:1d:8f:5c:63:6d:
                    ba:77:d2:0e:de:84:6f:c9:a7:f0:ff:be:90:18:49:
                    77:d1:07:61:41:6b:ad:b6:03:e6:59:22:43:09:da:
                    cb:fc:c1:02:3c:c6:34:02:fa:46:b6:c8:aa:b8:ec:
                    4c:39:a2:7e:62:cb:b9:82:b8:22:8e:61:f2:f6:70:
                    68:ce:02:95:e8:ea:e8:ff:5a:f6:04:6b:84:c5:db:
                    c9:17:65:7b:54:90:5a:e5:76:7c:eb:82:08:2c:70:
                    bc:1e:89:8b:3b:55:1d:76:07:33:ac:d2:89:33:17:
                    be:cf:a5:75:21:e1:db:69:03:ef:0b:d4:a7:4a:85:
                    c1:e2:d6:9a:45:04:24:9b:e9:df:d7:77:b0:bb:ea:
                    ba:95:98:70:57:15:6c:5a:87:d2:b5:be:b4:7a:40:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:B0:E1:CC:FA:2C:8B:58:9C:EF:CF:6B:5C:BD:E4:04:BF:6C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/24
                  130.41.132.0/23
                  165.85.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:97:46:5b:6a:db:fd:24:d1:55:45:3b:98:f4:14:74:62:
         6e:23:24:d0:bf:4c:4e:ff:90:d5:4a:5d:26:03:ab:36:61:e5:
         19:14:be:b9:70:12:6d:db:1a:4d:fc:2e:0c:9b:61:ce:6b:a2:
         d4:2c:3b:ee:e0:29:18:d5:7f:61:c0:4e:9f:80:b7:19:02:5f:
         d1:a5:03:d0:fd:7b:79:f0:3e:1d:90:b1:53:ca:7c:81:17:ff:
         b7:6f:83:c0:aa:9f:64:28:6f:2e:49:e3:c6:c3:7d:51:0e:1e:
         72:c1:4b:05:80:9d:29:85:40:d2:d5:55:95:d7:bf:39:83:02:
         0b:ab:7f:83:cf:6b:a4:72:e0:79:c0:61:a0:b5:60:61:7d:87:
         ee:10:c3:27:f3:43:42:7a:d9:16:96:ce:db:ba:57:ac:08:4c:
         60:8c:6f:ce:63:b8:ff:94:c9:74:72:ac:bc:18:d3:59:39:42:
         4b:e1:ed:e3:f0:2f:1e:5f:55:45:ed:c8:bb:e7:3a:4c:a4:20:
         f2:c3:7c:ed:3b:ec:67:ac:fa:eb:ec:32:73:9a:fd:df:33:74:
         2c:a0:55:33:6e:f3:b4:a5:e8:7f:eb:75:63:18:ce:c6:51:8e:
         cd:22:12:3d:59:f2:f9:dc:9d:f9:e9:07:bc:78:e8:81:68:e0:
         75:99:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:24:25 2025 by rpki-client