Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa
File:                     9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa (raw, json)
Hash identifier:          G72l3dGKPpRJSRmJ1DGmT6pifP9XD1JHSxTCfl7HGKo=
Subject key identifier:   49:CC:81:BD:82:A6:4B:DC:BA:EE:B2:D1:F6:DA:94:D4:42:54:AC:F2
Certificate issuer:       /CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
Certificate serial:       010D0C9F4328584BAD62506CC9F9A66A8671B980
Authority key identifier: 26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        64.112.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:50:6c:c9:f9:a6:6a:86:71:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=932e8815-85da-4b35-8465-caa8150eab93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:bd:78:8f:8d:33:f2:7e:68:43:17:f6:79:
                    bd:6f:8d:23:1e:4c:14:a5:88:19:39:8a:95:17:96:
                    5e:48:03:34:b3:bb:a8:e4:2e:1e:0b:1d:5e:cf:94:
                    8e:fe:10:2b:fb:45:03:c6:ff:99:45:68:1b:b6:33:
                    94:6c:bb:0c:94:56:c8:52:24:ea:a5:02:34:38:bb:
                    30:6b:f6:4d:24:83:74:97:b7:da:dc:f5:c3:28:14:
                    09:37:5b:d0:1b:46:52:f0:c4:6b:2f:ca:e8:f0:71:
                    b5:ac:c6:06:a1:a3:8e:4b:c0:3f:a6:ec:6b:54:82:
                    44:40:81:ea:3a:6a:db:b3:fa:bf:1e:0e:e5:35:85:
                    77:71:19:b8:82:59:e8:29:85:30:5b:7f:5e:7d:4d:
                    b9:d0:f7:0b:5a:c1:72:a4:db:ba:9a:79:07:44:5b:
                    19:93:92:5a:89:02:93:c0:33:c7:e4:48:e9:16:07:
                    35:c9:ad:1c:78:a1:35:07:a1:a1:1b:4c:ef:79:07:
                    fa:93:37:29:2a:c9:1b:22:d0:e8:8b:ea:15:92:38:
                    df:56:2c:05:9a:a1:48:95:2c:ef:4f:71:67:b1:d1:
                    e4:08:a2:67:5b:9d:c2:e1:e7:eb:c7:d1:26:40:0a:
                    4f:b1:5f:a1:8a:01:de:29:9a:47:c1:f0:67:a0:fe:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:81:BD:82:A6:4B:DC:BA:EE:B2:D1:F6:DA:94:D4:42:54:AC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl

            X509v3 Authority Key Identifier:
                keyid:26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:b9:66:df:65:38:f4:da:0b:53:37:fb:a2:bb:3a:55:d7:
         68:e6:06:2f:0e:fc:a0:44:5d:b3:2a:36:ad:b5:ec:e7:4b:73:
         a2:5f:0b:f1:59:13:df:cc:29:4a:52:d1:b2:ae:4f:6d:37:23:
         6c:c7:8f:ff:75:c0:ae:51:cc:36:15:f9:87:09:1e:8c:d2:78:
         6b:99:4a:ea:7b:06:58:4f:bd:81:04:0d:5f:5b:6b:cd:ff:9a:
         b2:b2:ac:08:ba:a6:91:03:0b:e4:62:44:66:8a:5a:8b:9b:db:
         a8:72:0e:dd:71:c1:97:cc:c0:7c:3f:17:48:ab:ae:9f:a4:10:
         8c:f1:d6:3f:e1:72:72:1b:27:cc:15:15:f5:28:62:e5:4e:42:
         b7:f8:1b:b4:6f:8e:98:b4:b4:ad:8c:5f:de:7a:23:b4:6c:ca:
         f3:3a:2b:f9:19:fe:42:db:2e:ab:0d:cb:77:31:1e:6c:19:18:
         33:c3:9c:dd:bf:35:41:c1:d8:de:42:05:f8:24:cb:08:13:2c:
         f6:4e:4c:92:19:e3:56:c1:5c:4e:8b:d0:d7:70:8e:5c:2e:be:
         13:87:c3:d5:1b:75:6e:44:37:84:74:f9:1d:c6:78:db:e6:86:
         cd:fa:22:2e:43:53:7c:2c:c9:58:74:9d:74:dc:58:80:dd:ae:
         db:0f:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:06 2025 by rpki-client