Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa
File:                     ea338235-81c7-343b-b797-594e288c4658.roa (raw, json)
Hash identifier:          EuP7i0Pd/XU4cNHAU0/3APSNvfDu2q7d5bJB/dt8rtc=
Subject key identifier:   83:0A:B3:9A:BA:13:0D:59:98:9C:CF:B2:23:84:97:76:96:BA:EA:DE
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584BA2378855C02EE1BC5BDD53E6
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     26042
IP address blocks:        67.220.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:88:55:c0:2e:e1:bc:5b:dd:53:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=786d9567-d37b-4bd5-8bb9-3523db45db27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:f6:5c:b1:29:9b:20:39:cc:b1:bf:dd:2e:
                    58:66:0e:bf:f6:27:d4:d7:20:73:69:65:2d:fb:8a:
                    04:73:db:33:30:f9:ee:1c:1d:5e:1e:e2:55:cc:74:
                    ca:fe:2c:c6:5d:7f:40:fe:04:ac:35:2c:8a:2c:ac:
                    8f:75:38:93:3e:74:00:31:e6:d9:b5:3a:79:c2:c9:
                    ea:63:4d:c7:d5:20:13:43:50:a3:e9:ef:3b:1e:09:
                    78:3d:56:db:56:2a:9b:67:67:a9:9c:2f:af:69:8c:
                    f2:8c:cd:87:1b:37:48:63:9f:9e:f2:54:96:f5:7b:
                    ef:b3:e2:b3:a5:6c:cb:19:59:5d:1d:b6:a8:b3:00:
                    ac:2b:a0:db:ca:21:18:e8:e8:aa:ec:ec:1f:94:3d:
                    bf:76:fd:f5:58:c6:fd:13:37:4f:4f:df:99:7c:4d:
                    a8:e2:b4:fa:5c:10:97:d8:ec:2a:f1:d0:6c:05:59:
                    3f:2f:49:6d:6a:e3:60:29:01:27:2b:d2:d5:a6:91:
                    b4:65:1b:56:2d:b7:17:49:78:16:0c:5a:af:9f:34:
                    7a:35:5e:29:4c:7c:45:13:34:fe:1b:ce:16:85:5a:
                    d4:10:36:3b:66:e2:0d:09:54:66:01:61:33:aa:14:
                    0b:b0:de:6c:cd:da:2a:2b:e5:4a:0e:11:a1:cd:d8:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:B3:9A:BA:13:0D:59:98:9C:CF:B2:23:84:97:76:96:BA:EA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:45:72:fb:c7:19:46:3d:df:e1:85:b7:97:ba:d5:d5:ce:
         b5:9f:b4:c9:d9:e6:87:91:34:7d:e5:d9:30:3e:42:61:f7:b0:
         f3:d6:8e:a0:d0:16:3d:5d:88:b0:5f:fc:32:61:fd:02:26:11:
         94:ad:35:df:b4:0f:83:40:61:7a:f7:f4:ef:93:e3:d2:c5:d9:
         e2:4d:98:d0:c3:74:ba:5b:35:82:ca:f4:ae:71:0a:98:87:c8:
         35:99:b1:36:b9:98:48:4c:4a:02:53:7d:ce:56:f6:89:c5:f8:
         08:dd:21:c7:8a:7a:42:3b:f3:d7:66:f7:7e:80:85:55:d0:75:
         8d:88:3c:cf:52:31:a2:e2:95:a5:01:94:8b:f6:9e:98:c4:ba:
         f0:ab:6f:3f:63:f6:83:49:e9:52:9e:dd:c7:50:61:27:64:00:
         6c:16:bf:cc:7e:b3:6c:b4:c7:93:ab:53:0e:e8:f6:01:90:32:
         52:07:70:d1:c1:fa:26:0c:f1:6b:09:67:13:c6:47:ce:9f:29:
         37:37:94:19:31:de:80:f3:9b:e6:6f:1a:a4:dc:44:56:15:c2:
         e9:a0:b7:bc:f5:46:28:ff:a0:b3:15:47:56:10:b0:72:2c:2b:
         ed:5a:3e:3c:72:77:cf:66:73:1e:53:f1:58:9a:c5:31:4b:21:
         28:cd:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:47 2025 by rpki-client