Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
File:                     14a69187-3551-3a4a-8a20-6c538d19949d.roa (raw, json)
Hash identifier:          DpSnWwvbx8yzCrSPpfIj3lM2la9kHpCBCNp55qCp8l0=
Subject key identifier:   97:C9:77:A2:56:E9:C6:00:80:34:64:B7:82:11:1A:91:11:FB:9D:51
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A9FFB8D9A2275E99324281560
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     211439
IP address blocks:        65.110.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:8d:9a:22:75:e9:93:24:28:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=4a986479-90b1-4b1d-a4cd-bc6a06a162ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:cc:53:1e:61:01:8e:bd:a4:b8:72:0c:3e:
                    31:79:fa:77:98:f8:76:61:c8:b9:19:29:61:7e:c6:
                    54:a2:a2:36:b9:d5:62:f5:99:e3:2e:83:71:8a:c2:
                    44:71:82:cc:8d:18:69:42:53:7a:e2:e7:e2:e6:e9:
                    14:e3:a2:43:15:f9:de:7e:10:79:01:a5:8a:1d:b4:
                    20:31:14:84:5d:a3:25:79:d5:b6:ed:6d:78:44:fe:
                    1e:28:8e:cc:61:b9:30:f9:75:27:29:e4:d8:39:b2:
                    ce:ed:40:8c:3d:d1:46:1f:e1:96:e2:f9:26:76:5b:
                    91:45:5f:27:6f:57:f2:0b:68:a2:1c:9f:07:18:57:
                    a8:c2:e9:6d:79:8d:e1:39:2a:11:6e:cc:11:cb:89:
                    5a:aa:6c:91:2d:17:3b:3e:0d:06:72:0e:89:74:26:
                    c2:67:41:0d:36:c9:43:1b:3e:9a:cc:ad:42:78:8c:
                    1e:38:d0:d5:1b:0e:af:9a:96:b1:73:7e:64:55:31:
                    89:4f:11:b0:18:ee:0d:03:07:3b:7e:4b:ab:2b:dc:
                    02:50:c0:1a:95:38:fc:b0:6c:38:07:10:98:66:b3:
                    e7:0e:e8:1f:d3:30:cd:c1:47:6e:54:b7:4d:a2:ef:
                    66:ef:94:f5:a1:a7:f0:82:ce:11:a2:6b:98:c2:6a:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:77:A2:56:E9:C6:00:80:34:64:B7:82:11:1A:91:11:FB:9D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:79:a7:5d:10:17:68:da:03:99:5c:7b:7f:43:7c:9a:24:b6:
         da:a6:28:d1:44:c1:10:c4:5a:fd:b5:f3:3b:4c:66:fd:02:c4:
         5f:0a:c8:a7:bd:a9:05:e6:23:3b:47:15:06:02:85:46:26:8c:
         97:e3:c4:5b:c5:60:6e:c0:fe:b8:39:4f:1f:73:a7:94:ff:ec:
         5e:88:72:e2:50:14:c6:c8:cd:58:e4:10:ea:85:f0:29:1e:e9:
         9c:01:4c:a2:fa:12:9a:06:1f:68:49:f8:1e:de:58:d6:ec:c4:
         e1:18:0e:c9:16:e4:30:9e:0c:31:37:ed:21:6f:35:8f:12:a2:
         eb:06:a3:f5:d3:8a:7c:62:3f:e1:3e:e0:ae:c9:df:e9:ee:72:
         a9:6a:33:be:57:ad:51:67:fb:de:a5:3f:a1:9b:88:24:9e:96:
         aa:39:7c:70:7e:c5:e6:ea:6c:38:03:97:50:8e:b7:60:03:58:
         08:e9:0b:69:ec:e4:9c:ff:e9:01:9e:f0:b3:9a:b5:5e:18:2d:
         48:d0:8e:f4:7e:68:08:d5:2e:c6:48:a0:05:5f:5e:2f:5d:0a:
         da:b0:ec:94:d7:e8:2e:bc:ff:47:bb:5c:5c:03:ab:6b:fc:21:
         50:af:d8:8c:44:33:0f:a5:e5:2f:5c:6d:7a:ed:27:86:49:41:
         e4:d8:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:57 2025 by rpki-client