Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
File:                     6555333b-d2c7-3512-ac66-f7eb934c3107.roa (raw, json)
Hash identifier:          hm/IjUVxMWPfGTZcc++g/Ny4UkP9CTN8MPjuG7spa98=
Subject key identifier:   68:36:20:04:8B:38:68:21:EE:86:CC:ED:BE:36:1C:03:9B:41:00:03
Certificate issuer:       /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
Certificate serial:       010D0C9F4328584BAA97A47500C986306528B298
Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     18530
IP address blocks:        198.29.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a4:75:00:c9:86:30:65:28:b2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=51ff64e7-e6f8-4e76-978e-89184c342aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:d4:f5:3f:46:10:60:68:16:8d:90:57:e0:
                    cc:5d:b6:1e:93:9c:f6:82:54:b6:ba:08:8c:93:3d:
                    f9:9f:08:43:c8:6e:6b:06:16:f2:b0:47:d3:63:fb:
                    0b:ab:1a:06:d2:96:ef:2a:ff:23:42:5a:9e:a0:67:
                    1b:57:77:1e:23:e0:dd:56:4a:db:d9:fb:19:ca:b2:
                    56:df:46:7c:a2:13:28:60:2c:ca:37:fd:33:0b:b8:
                    d2:4a:19:3b:5b:da:39:f7:9b:63:78:34:86:de:a5:
                    0d:6e:f0:c8:79:78:d3:99:40:b3:67:08:f0:8e:30:
                    de:d7:4a:ef:8d:7b:0b:e4:7f:b5:12:98:a8:db:ed:
                    fc:ad:84:fb:9a:60:f2:62:44:67:b6:a6:1c:a4:2b:
                    51:a6:96:45:7b:8d:44:76:eb:52:fc:6f:69:22:5d:
                    96:3d:55:35:b7:d4:d0:2a:1a:5c:8a:b4:f8:af:f9:
                    bc:85:25:d7:b6:c0:92:a6:3c:d2:ba:4a:74:3f:04:
                    7f:61:3e:0e:ce:b2:7f:2e:6c:a7:5a:e7:e1:3c:4d:
                    3e:c3:a4:f5:04:1d:9e:23:fb:96:68:6c:14:78:ec:
                    9d:e9:ad:cc:6e:0a:27:94:17:29:c1:43:b9:90:37:
                    67:74:a1:39:23:8c:b6:f0:1e:a1:c8:eb:b6:4c:dc:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:20:04:8B:38:68:21:EE:86:CC:ED:BE:36:1C:03:9B:41:00:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/6555333b-d2c7-3512-ac66-f7eb934c3107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl

            X509v3 Authority Key Identifier:
                keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:dc:04:9f:f9:96:38:de:3a:4b:12:0c:21:29:34:ea:dd:
         be:dc:e1:cc:e7:85:04:e5:54:f7:e0:be:c9:b3:2b:1d:5c:17:
         89:b4:80:93:46:31:e4:28:46:7d:3c:ea:3c:3c:f4:6a:0e:68:
         1e:9d:a0:fa:80:ba:79:77:d0:0e:40:b2:45:c2:23:67:e4:42:
         1b:35:94:77:55:83:c4:31:e0:82:3f:58:03:97:66:c0:68:a5:
         26:7c:f9:af:12:af:45:e9:22:1d:99:9b:14:9c:74:08:c3:76:
         ab:6b:f7:bc:23:74:2f:9e:5c:42:fc:2f:05:d5:2b:f2:86:e0:
         45:5d:4b:f6:f4:5b:f2:fd:52:1a:57:88:e5:93:8a:f9:c6:0b:
         0f:dc:67:92:03:a2:a9:9d:e4:48:01:1b:5b:1d:d0:77:2c:f9:
         52:61:a0:58:84:9f:c1:c8:87:e3:7b:9f:10:72:d1:2f:ba:54:
         7f:61:aa:7c:55:1b:72:85:67:69:1c:b8:27:e5:2f:72:35:18:
         d6:9b:a6:e2:44:1f:81:f7:b9:fd:45:2d:26:5a:14:35:2a:5e:
         39:3a:e3:77:95:c1:87:b9:e7:0a:32:99:b8:a0:89:44:35:23:
         96:72:b6:65:d3:24:79:3e:d2:1d:50:6b:db:8c:cf:f8:e7:c4:
         ec:0c:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:18:04 2025 by rpki-client