Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/743796bd-22a1-3b1b-8ec5-1f6254201b44.roa
File:                     743796bd-22a1-3b1b-8ec5-1f6254201b44.roa (raw, json)
Hash identifier:          nLNFP4+zfQU73QPH6YZdhWXXmpwMq83R4DICzHT4Uh0=
Subject key identifier:   0A:CD:EF:FC:DE:85:81:59:0D:F2:3C:92:0F:1B:7D:CA:9A:28:A4:9C
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F4328584BAEC7CA5864F86E74373B6480
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/743796bd-22a1-3b1b-8ec5-1f6254201b44.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     32524
IP address blocks:        66.85.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:ca:58:64:f8:6e:74:37:3b:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=6dab076e-64b8-4739-a0d8-e8471f4f5adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:b0:8c:fb:1a:f4:5b:d9:5e:98:dc:cd:d8:
                    17:28:10:84:13:06:38:83:34:62:ef:0a:e7:32:62:
                    ca:7f:00:12:7d:7e:13:25:c5:31:e8:1a:56:7d:bb:
                    3c:86:d6:7c:6f:c6:71:8a:54:e4:07:b8:84:04:59:
                    13:18:d3:18:34:1f:06:f1:f4:6f:5a:9e:a2:0f:34:
                    58:fe:a4:9c:ed:03:0a:72:db:2e:db:11:b3:b5:32:
                    30:b9:f6:8e:56:22:ab:fc:60:5a:de:7d:9e:e3:48:
                    a4:8a:cd:5f:a0:01:8e:37:9e:90:98:08:3e:be:79:
                    4f:82:b7:62:ce:0b:92:62:58:c7:63:37:2c:fe:ee:
                    be:61:4f:83:9b:9e:29:e3:cc:e8:2b:38:29:2d:79:
                    b6:dc:c2:14:29:af:62:1d:f1:73:d5:37:0e:01:6c:
                    44:82:1f:fb:45:6c:5b:d6:1e:78:83:72:e3:fe:4d:
                    bb:34:97:14:e5:de:43:b6:62:e6:ea:a3:ac:03:38:
                    cb:82:81:f9:a6:29:7b:8c:6c:cc:f8:64:1a:33:69:
                    1c:93:5c:17:f3:b7:cc:23:0f:fe:15:58:73:ba:e7:
                    1b:5c:b6:27:1e:98:66:86:90:fe:87:27:b3:e1:7a:
                    93:23:28:6c:0f:c7:b2:ba:0f:cb:2e:70:5d:ad:bc:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:EF:FC:DE:85:81:59:0D:F2:3C:92:0F:1B:7D:CA:9A:28:A4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/743796bd-22a1-3b1b-8ec5-1f6254201b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:37:e3:3a:a4:2d:51:57:0d:c7:bf:ab:33:91:8a:26:3f:
         c7:10:c5:db:69:02:51:22:c1:5e:07:51:23:eb:cc:0a:ee:38:
         44:35:1b:3d:f5:7f:97:07:5d:d7:fa:20:83:04:40:e0:51:3d:
         34:c6:e5:b1:ec:82:0d:8d:90:84:8e:09:f8:dd:39:48:c4:ac:
         0d:02:43:79:90:f1:0a:98:17:24:85:26:3e:28:bb:05:5e:67:
         69:c1:1a:bc:79:1f:56:5b:da:01:5a:83:6a:18:21:ac:76:f4:
         91:8c:40:97:16:af:73:41:f7:3a:99:1c:d3:96:15:f0:dc:7d:
         38:aa:90:b0:be:98:f4:4c:74:25:59:9b:bb:b1:16:ce:70:f8:
         ea:20:ae:14:58:8e:97:4e:46:4b:aa:da:7c:23:df:11:76:91:
         33:1c:88:9c:a2:cd:b9:fa:c2:12:7b:ea:bd:0c:89:da:ad:95:
         f5:a6:7b:fe:01:2c:f7:9b:e0:17:b3:d1:52:12:9e:76:52:17:
         1b:00:09:6f:63:46:dc:38:5a:6b:81:8e:a1:5f:94:53:23:e6:
         82:c2:c7:11:b3:95:14:28:4a:0d:44:69:13:c9:10:b8:f3:18:
         32:d7:18:61:9c:d4:3a:9c:a9:2b:e2:60:23:a3:92:3a:c8:c2:
         47:c6:33:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8pYZPhudDc7ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVjYzQ0NWMtMDY0ZC00MWVlLTkxZjEtM2VmNzA4MjQx
OTgzMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
NmRhYjA3NmUtNjRiOC00NzM5LWEwZDgtZTg0NzFmNGY1YWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0KwjPsa9FvZXpjczdgXKBCEEwY4gzRi7wrn
MmLKfwASfX4TJcUx6BpWfbs8htZ8b8ZxilTkB7iEBFkTGNMYNB8G8fRvWp6iDzRY
/qSc7QMKctsu2xGztTIwufaOViKr/GBa3n2e40ikis1foAGON56QmAg+vnlPgrdi
zguSYljHYzcs/u6+YU+Dm54p48zoKzgpLXm23MIUKa9iHfFz1TcOAWxEgh/7RWxb
1h54g3Lj/k27NJcU5d5DtmLm6qOsAzjLgoH5pil7jGzM+GQaM2kck1wX87fMIw/+
FVhzuucbXLYnHphmhpD+hyez4XqTIyhsD8eyug/LLnBdrbxTcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArN7/zehYFZDfI8kg8bfcqaKKScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNj
NDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3MDgyNDE5ODMvNzQzNzk2YmQtMjJhMS0z
YjFiLThlYzUtMWY2MjU0MjAxYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWVjYzQ0NWMtMDY0ZC00MWVlLTkx
ZjEtM2VmNzA4MjQxOTgzL2VlY2M0NDVjLTA2NGQtNDFlZS05MWYxLTNlZjcwODI0
MTk4My5jcmwwHwYDVR0jBBgwFoAUzUCROQ67xHz8aYwLu+ubI2atMYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNjNDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3
MDgyNDE5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlX/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOSN+M6pC1RVw3Hv6szkYomP8cQxdtpAlEiwV4HUSPrzAruOEQ1Gz31
f5cHXdf6IIMEQOBRPTTG5bHsgg2NkISOCfjdOUjErA0CQ3mQ8QqYFySFJj4ouwVe
Z2nBGrx5H1Zb2gFag2oYIax29JGMQJcWr3NB9zqZHNOWFfDcfTiqkLC+mPRMdCVZ
m7uxFs5w+OogrhRYjpdORkuq2nwj3xF2kTMciJyizbn6whJ76r0MidqtlfWme/4B
LPeb4Bez0VISnnZSFxsACW9jRtw4WmuBjqFflFMj5oLCxxGzlRQoSg1EaRPJELjz
GDLXGGGc1DqcqSviYCOjkjrIwkfGM1k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:33:13 2025 by rpki-client