Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File:                     75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier:          MqxnL2GbUAsnsZ7VltXLnz5goTWblc23szevrcZS9jE=
Subject key identifier:   C6:DF:62:C9:34:D6:A8:D0:F9:7D:93:4F:D6:49:4C:82:48:3E:F7:69
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584BA93252B972717421B97C1980
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     25820
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:52:b9:72:71:74:21:b9:7c:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=581fb92d-efc7-45c0-9734-9ef525968d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:53:69:dd:b3:a0:f4:80:3e:ca:6f:5d:2b:
                    84:d4:5a:bb:50:ba:7a:f7:12:2a:ec:7f:52:95:28:
                    c1:15:d9:99:11:0d:bc:7b:15:32:3d:5d:68:bf:56:
                    ab:ae:93:5c:9f:02:58:f4:01:ab:59:7c:0b:eb:53:
                    f7:44:49:9f:68:7c:10:09:6a:ac:18:6b:7f:2c:23:
                    30:b0:db:22:e2:6c:0d:ff:e8:62:43:9f:42:44:3d:
                    0a:d3:dc:9f:d6:76:b6:59:25:db:31:82:d4:f1:64:
                    26:e8:75:04:8e:f3:f9:02:7e:5d:f4:d7:fc:bf:ba:
                    3b:e8:9d:88:fb:bb:6e:19:f1:6d:e7:e0:b1:62:a9:
                    98:22:ce:63:e3:2c:3a:2c:19:46:0d:2b:40:67:55:
                    f6:ff:58:d4:03:e6:50:b5:93:5f:bd:1b:1a:57:6d:
                    df:16:f8:3f:e6:28:aa:2e:40:58:97:91:37:08:ab:
                    fe:c0:22:9e:be:57:68:7c:9e:c7:76:ba:cd:a1:3e:
                    ad:39:e7:f3:bf:4f:f5:6e:dd:a3:61:4e:a8:2f:16:
                    26:5e:cb:45:00:7a:23:bd:be:7d:a7:8c:4d:77:eb:
                    f5:43:6b:a3:b0:5a:f7:de:3b:66:5b:5d:75:f4:56:
                    01:0e:15:1f:09:e0:86:fa:78:2b:7b:49:c2:7e:8a:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:62:C9:34:D6:A8:D0:F9:7D:93:4F:D6:49:4C:82:48:3E:F7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:df:8f:d2:20:6b:76:bc:8e:f0:bf:dd:67:0a:b8:46:49:c6:
         2f:71:7d:94:93:c0:e8:71:98:32:28:d7:f9:4f:16:38:57:be:
         d1:fd:c8:66:f4:41:eb:5e:d2:60:37:46:af:2b:55:00:f8:dd:
         5b:9c:51:12:9e:6e:ed:63:30:92:fe:04:86:a8:a4:a7:da:91:
         57:e7:20:63:bd:4b:1c:64:3f:d4:78:c6:c1:c4:56:5c:58:50:
         e4:b2:a0:b1:ad:f4:3d:2a:41:83:ee:d3:f4:15:e0:d7:6d:a9:
         50:8b:1b:25:8b:69:e3:ba:e2:35:c4:c1:64:96:57:cd:4b:f5:
         cf:0d:b2:64:6b:5b:8f:cd:3d:7d:f4:66:b9:fd:0f:f7:b7:c2:
         09:64:22:64:d6:92:5c:09:2b:46:de:cb:ba:ce:96:8e:7f:44:
         d6:f1:76:42:3f:ba:d0:45:65:9a:e9:e9:eb:1a:87:d4:84:80:
         2d:74:c8:e7:84:b2:fb:63:c2:20:ae:a0:15:e1:4a:95:64:8b:
         c8:f4:5b:1f:29:c3:38:43:91:f1:05:fb:29:a6:43:27:40:41:
         ce:f8:51:cc:82:a5:25:02:70:0e:89:cf:d3:55:7b:b3:a2:85:
         39:12:b6:fa:6d:10:00:49:4d:cc:d9:0e:a7:47:4a:ef:c6:37:
         98:b8:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:40 2025 by rpki-client