Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa
File:                     68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa (raw, json)
Hash identifier:          dz7x52pJWdEFPjNXFw+V1T9hiSMdw6JRFMxXEfzjsHM=
Subject key identifier:   0B:14:8E:33:80:BA:35:92:91:4F:EC:61:BB:EB:97:9F:33:7D:90:08
Certificate issuer:       /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial:       010D0C9F4328584BBE4026971530524DE0224100
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        207.66.104.0/24 maxlen: 24
                          207.66.105.0/24 maxlen: 24
                          207.66.106.0/24 maxlen: 24
                          207.66.107.0/24 maxlen: 24
                          207.66.108.0/24 maxlen: 24
                          207.66.109.0/24 maxlen: 24
                          207.66.110.0/24 maxlen: 24
                          207.66.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:26:97:15:30:52:4d:e0:22:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=0c104283-cbf2-4f48-8e95-828c5575d2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:5f:47:3b:48:4d:a0:bd:23:00:a4:7b:1e:
                    c5:be:d8:18:4d:13:a0:37:b6:80:f7:2a:f2:c7:1d:
                    c1:dd:12:f8:13:e1:32:f8:16:67:ed:c3:da:be:b7:
                    cb:86:ce:b8:9b:7b:59:dd:a9:07:35:f9:1e:85:30:
                    2e:ae:ec:8b:89:a3:5a:66:33:6b:b8:fc:1d:4e:75:
                    80:43:c3:14:60:c1:04:19:30:c2:01:05:d2:dc:c1:
                    f4:f1:6c:3b:66:2b:51:fd:5e:39:a4:e5:c3:7b:1e:
                    5e:21:8b:a2:0a:47:6e:4f:a0:6b:84:1c:e2:83:bf:
                    3c:27:03:de:cf:20:22:2f:0c:77:3b:3d:20:f9:ea:
                    98:29:65:e6:cd:72:25:34:11:1f:23:ad:8d:2f:66:
                    e1:f5:64:1f:56:5e:8d:5f:f4:30:b7:81:aa:ef:97:
                    61:2c:05:f7:0c:e8:71:be:64:39:91:07:5f:17:65:
                    35:2c:54:c8:fc:cd:a6:38:66:68:36:57:f5:45:45:
                    01:3f:07:3e:28:ca:03:e0:e6:65:e0:44:27:fb:f8:
                    b0:ba:68:55:9b:05:c2:dc:4b:10:b5:63:84:23:a4:
                    5a:8a:8a:3c:e3:9a:f9:10:38:00:8b:0b:84:8b:91:
                    ea:ef:60:21:4e:e5:61:4c:b6:02:db:4b:1a:38:fa:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:8E:33:80:BA:35:92:91:4F:EC:61:BB:EB:97:9F:33:7D:90:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl

            X509v3 Authority Key Identifier:
                keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:ea:b9:fa:41:f3:71:09:cd:01:f3:98:54:4d:53:d4:82:
         48:47:f0:c3:62:ee:4b:85:f6:8b:ad:85:13:89:90:9d:f7:25:
         98:df:a9:6d:f7:c8:0f:c3:9b:9b:b5:30:72:5a:f9:f1:b5:ef:
         0b:73:1d:93:28:3e:ac:40:93:03:98:16:29:89:f1:c4:41:47:
         03:ad:cc:94:4d:52:e4:83:1e:5b:49:8e:6f:bb:df:3e:5c:41:
         95:59:fc:b5:da:2a:ab:f6:93:cf:11:39:d7:75:b9:1a:bf:88:
         ce:64:a6:be:6c:5d:64:a4:88:b6:8f:97:c4:0c:90:cc:d1:fd:
         c0:df:a5:d4:be:1b:13:d3:63:91:d3:e3:ee:38:ed:dd:c4:1e:
         fa:91:83:b7:36:3c:5a:23:c1:5f:5b:d8:8b:fb:02:9b:71:ed:
         85:dc:21:39:5b:03:d3:eb:85:0c:9e:eb:81:e9:2d:09:e5:38:
         72:5a:a8:d6:20:a1:05:07:e8:22:99:5e:64:da:a6:df:9f:97:
         26:44:41:ea:de:36:86:97:15:a1:59:66:fa:5e:ce:8a:79:ba:
         3d:1a:c3:6a:e8:66:be:66:f0:a7:54:20:70:c9:db:a3:ab:7b:
         f6:0c:ee:7b:88:f6:a7:70:95:c8:42:92:7a:ae:c3:bc:72:7e:
         a7:54:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:18 2025 by rpki-client