Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa
File:                     820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa (raw, json)
Hash identifier:          RrpQXRkk34k3dnSNrxiSuZr/vGXkftVCRd7eYq/eJNU=
Subject key identifier:   50:C1:5A:08:1E:E4:47:D8:C1:8A:31:01:36:DB:2A:6A:A4:8D:88:03
Certificate issuer:       /CN=5fca320f-a628-49d3-afa7-8717a0ad5699
Certificate serial:       010D0C9F4328584BBFA5AA4D578222BDFC287200
Authority key identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     33425
IP address blocks:        166.19.0.0/16 maxlen: 24
                          192.112.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:aa:4d:57:82:22:bd:fc:28:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fca320f-a628-49d3-afa7-8717a0ad5699
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=60aa0838-0efc-4c78-90b0-f142c7966b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:51:dd:93:3c:bd:a6:ff:30:eb:68:e3:5b:
                    1f:67:6b:e8:28:d9:8e:b7:39:b7:12:9e:21:d4:42:
                    58:52:9b:8f:3f:24:4c:b3:a4:4c:7f:82:96:60:18:
                    cb:41:28:48:de:e9:e4:1a:9c:b5:f1:28:3c:88:e0:
                    0b:e8:61:27:53:64:6f:02:bb:98:75:a3:da:3b:30:
                    1f:83:27:ef:08:48:16:e3:2c:c4:1c:ac:f6:6c:92:
                    27:04:0d:65:65:bf:3b:d7:6c:a0:d2:23:b4:24:cc:
                    ed:e4:84:08:b3:48:e4:91:c8:d3:76:28:f8:34:6f:
                    3b:43:af:13:b8:61:55:30:55:5d:e2:c0:d1:2e:19:
                    7f:ab:47:5f:34:ca:3f:9e:ac:7f:9a:d5:e5:4a:36:
                    40:a4:8f:4b:af:58:7e:0c:b1:da:35:78:ab:6a:18:
                    ab:70:21:1b:79:55:53:de:f9:18:7f:57:da:17:a1:
                    c1:0e:dd:19:47:84:ca:f7:fd:ce:eb:e6:e5:88:57:
                    8b:6c:39:15:62:80:2f:cc:fb:0b:da:be:74:45:c9:
                    11:18:5d:d1:cb:1e:fb:c3:f2:45:d8:3c:8a:60:df:
                    aa:0e:c3:6b:2c:3d:65:84:ef:f6:ee:a1:ad:22:22:
                    81:ae:3f:3a:d6:67:2d:b2:95:62:50:24:a8:4f:7d:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C1:5A:08:1E:E4:47:D8:C1:8A:31:01:36:DB:2A:6A:A4:8D:88:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl

            X509v3 Authority Key Identifier:
                keyid:56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.19.0.0/16
                  192.112.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:72:78:c5:3e:a0:b4:c2:5a:15:43:19:9d:ba:56:64:0d:
         55:4f:a8:f5:c9:cb:05:7a:66:24:13:1d:e6:bc:bc:b7:b3:bf:
         42:32:4a:a1:6c:63:81:18:56:a6:a9:a0:c1:11:18:6d:a1:0f:
         ba:ee:1c:a4:66:28:c1:0d:3e:ff:6e:25:c5:3c:55:9c:31:5a:
         97:6d:fa:21:c4:e0:11:12:e2:9d:80:d1:1d:40:18:62:8c:6e:
         4a:74:b4:ca:5a:eb:9a:32:7a:d7:12:d8:9e:9b:f9:3f:ad:c2:
         23:70:cb:b6:88:a3:db:84:94:26:19:3b:7f:98:ae:87:ab:bf:
         3c:22:33:46:ae:77:8a:d8:fe:67:8a:b1:43:b6:9c:ae:26:87:
         4e:80:4f:39:24:17:6b:04:f3:93:ad:7b:4d:12:bb:8b:e6:a1:
         fd:51:70:6b:e6:99:23:2e:03:91:0f:98:53:7c:59:5e:fd:2e:
         c1:5e:4a:80:18:b8:08:e9:a7:bb:32:8b:f7:94:a0:92:30:c4:
         79:ca:c0:ea:ae:43:a1:c6:83:90:9c:1a:2e:07:f0:be:c3:7a:
         04:9d:3a:39:86:fc:02:eb:4e:b2:70:24:a7:43:cf:60:18:03:
         0d:49:8b:54:55:b6:cf:85:23:5c:66:c4:f4:4a:9a:db:d8:a0:
         c0:7f:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:00 2025 by rpki-client