Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
File:                     1291833c-59e9-3300-872f-ed24b4c85804.roa (raw, json)
Hash identifier:          AKj+8wT7s5nWfsc99HtKDcwD1pw7+aLV7mjS5L03+qE=
Subject key identifier:   02:C1:1F:17:88:65:42:C3:B2:73:5D:E8:22:40:8E:16:91:74:CC:D5
Certificate issuer:       /CN=5fe50bbd-28d3-4434-bf61-3151216bd374
Certificate serial:       010D0C9F4328584B99D781874FE121F642098340
Authority key identifier: 0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        64.190.110.0/24 maxlen: 24
                          64.190.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:81:87:4f:e1:21:f6:42:09:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe50bbd-28d3-4434-bf61-3151216bd374
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=efe62d23-98de-4f13-ab0f-23a99e65a0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:52:a7:c2:ad:a2:80:5a:38:91:af:88:ca:
                    5c:06:00:a0:1b:ae:f0:42:ca:1c:b8:1e:79:13:8a:
                    09:14:d8:27:0b:63:5a:2f:a3:71:50:5a:46:bb:9a:
                    5a:ec:3f:58:88:05:81:ee:2d:01:b1:00:a7:d2:cc:
                    b4:c1:c6:53:93:4c:61:f7:12:4c:21:8d:55:c9:a4:
                    60:fe:f7:ea:f4:c1:47:aa:ab:89:18:56:7b:c6:1f:
                    58:39:b4:bd:44:57:f2:2b:d3:ff:38:01:7d:6d:86:
                    28:2b:e7:38:70:1c:7a:36:f7:a8:4a:65:6b:34:1b:
                    71:95:5f:4e:0b:5a:1d:7b:4b:32:ed:89:49:bd:63:
                    5b:79:ea:48:14:b0:2f:94:37:2e:f3:f4:34:72:f9:
                    99:3a:3d:14:d0:41:e4:17:a0:30:a2:75:b2:a0:87:
                    7d:66:08:c6:ac:75:9d:92:b6:ca:c8:83:2a:a9:45:
                    fb:f7:d4:8e:25:31:20:c7:3e:06:d3:0f:ba:a7:81:
                    23:99:44:8c:25:de:e3:aa:e4:53:2e:a3:ee:79:b6:
                    6b:8f:3b:e6:29:0c:1e:0a:fd:d2:56:e0:37:fc:33:
                    9a:88:5c:fa:18:38:11:4d:f2:0e:5e:68:98:73:26:
                    4e:ea:3b:e0:da:66:31:4e:8c:c6:ab:b3:96:66:2a:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C1:1F:17:88:65:42:C3:B2:73:5D:E8:22:40:8E:16:91:74:CC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl

            X509v3 Authority Key Identifier:
                keyid:0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:7e:c9:59:61:91:0e:40:54:86:47:59:84:e5:a6:10:10:
         17:96:ce:2a:b2:97:2c:da:2f:08:3d:6c:87:4e:07:8d:3b:72:
         36:d5:17:76:0f:32:d7:d7:21:2a:c5:c2:95:92:85:e2:c8:fd:
         0c:6e:a7:7a:3a:aa:f1:e2:d8:62:61:7c:4b:23:9f:f8:60:f2:
         4b:cb:e6:04:ab:27:df:29:b6:c6:12:33:a1:14:fa:9a:3c:9d:
         d8:c6:d4:93:0d:a6:5d:7a:b5:95:34:14:b7:91:03:ab:69:14:
         1c:a2:99:dd:50:ed:19:0c:73:2d:13:13:99:57:83:59:5b:aa:
         25:23:43:b7:b3:42:57:15:58:23:ca:6f:bb:7b:e4:f6:fa:82:
         22:b2:2b:e9:49:af:61:5d:34:5d:cd:f7:f3:52:d9:bc:e3:4c:
         ae:f7:52:c2:c3:8a:94:cb:69:90:52:aa:be:e7:c9:21:a4:7b:
         c8:77:cf:d0:af:c1:ba:a2:5d:c9:67:3d:cb:71:dc:9b:8f:f1:
         53:0d:e0:cf:15:7a:c4:50:a6:ba:f0:cf:97:0f:58:9f:01:d9:
         e4:05:1d:96:a6:01:da:6f:18:0c:ce:98:eb:c2:31:95:2a:a2:
         af:a0:af:6b:c9:aa:f0:be:7d:fb:15:b6:a4:eb:ad:15:b7:4c:
         b5:bc:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:42 2025 by rpki-client