Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
File:                     033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa (raw, json)
Hash identifier:          q+W9v+BPbZ65WLWMNvf6fPbiV9+DfHsYJuTAcIAda4o=
Subject key identifier:   37:C3:0E:70:92:0F:89:47:20:EE:8F:CB:95:CF:EE:BE:66:C6:50:9B
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584B95A78CEB383F51A2BC4C1400
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     20055
IP address blocks:        64.52.6.0/24 maxlen: 24
                          64.52.96.0/22 maxlen: 22
                          66.35.0.0/20 maxlen: 20
                          69.55.208.0/20 maxlen: 20
                          72.21.10.0/23 maxlen: 23
                          107.191.236.0/22 maxlen: 22
                          137.83.56.0/24 maxlen: 24
                          137.83.80.0/23 maxlen: 23
                          162.33.232.0/21 maxlen: 21
                          162.43.200.0/21 maxlen: 21
                          192.75.144.0/24 maxlen: 24
                          192.152.0.0/24 maxlen: 24
                          198.179.52.0/22 maxlen: 22
                          204.194.220.0/23 maxlen: 23
                          205.174.152.0/22 maxlen: 22
                          206.166.252.0/23 maxlen: 23
                          207.32.192.0/20 maxlen: 20
                          208.52.160.0/24 maxlen: 24
                          208.52.175.0/24 maxlen: 24
                          209.237.136.0/22 maxlen: 22
                          2001:506:38::/48 maxlen: 48
                          2001:506:39::/48 maxlen: 48
                          2605:21c0::/32 maxlen: 32
                          2607:f688::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:8c:eb:38:3f:51:a2:bc:4c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9c4072bd-bfe8-46cd-b7ed-f7e893af7496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:a9:79:06:12:af:d7:92:99:c8:8c:ef:98:
                    6d:c6:b6:51:b2:05:2f:7d:22:de:20:1e:84:93:84:
                    36:e7:c2:f9:0f:47:70:0a:98:04:05:21:ea:a0:b5:
                    f9:f6:8b:b2:78:23:60:eb:fc:0d:e5:ab:e2:37:87:
                    ba:e8:72:20:43:79:ef:b1:f9:7c:42:5f:e1:7c:28:
                    ad:30:a9:a7:03:7d:de:e9:8c:b6:76:8c:e0:74:95:
                    d5:4b:4c:33:93:b2:c7:97:a0:c5:01:17:16:f7:60:
                    91:9d:7d:1d:02:5d:bf:e9:db:e4:5e:98:e0:ca:d2:
                    23:f2:e7:1d:26:3d:20:1b:35:59:ae:51:e8:e1:79:
                    ca:82:c0:83:52:54:49:f4:f3:a2:8a:73:07:64:79:
                    6d:c1:10:5d:b3:3b:93:12:91:19:a5:07:9d:de:07:
                    e6:0b:cb:d1:8f:8d:ad:e5:ab:c6:b3:9a:8a:64:12:
                    c9:3d:99:10:8f:f2:9f:c9:6d:fe:bc:9e:fb:d4:f2:
                    f6:79:70:7d:47:de:7a:8a:ba:d7:97:40:98:1f:64:
                    e9:6f:2a:c5:88:f3:55:85:d4:77:ff:fd:d1:f7:bb:
                    e1:91:8b:93:cf:97:a8:ac:0b:2a:94:ac:cc:c8:81:
                    a3:a8:31:07:0a:2c:4c:2c:9c:b2:f0:55:23:0e:90:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C3:0E:70:92:0F:89:47:20:EE:8F:CB:95:CF:EE:BE:66:C6:50:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/033fa1ef-dc56-3fb8-815d-5c5ba277e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.6.0/24
                  64.52.96.0/22
                  66.35.0.0/20
                  69.55.208.0/20
                  72.21.10.0/23
                  107.191.236.0/22
                  137.83.56.0/24
                  137.83.80.0/23
                  162.33.232.0/21
                  162.43.200.0/21
                  192.75.144.0/24
                  192.152.0.0/24
                  198.179.52.0/22
                  204.194.220.0/23
                  205.174.152.0/22
                  206.166.252.0/23
                  207.32.192.0/20
                  208.52.160.0/24
                  208.52.175.0/24
                  209.237.136.0/22
                IPv6:
                  2001:506:38::/47
                  2605:21c0::/32
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:a8:b1:3b:d2:e7:83:b4:48:39:c7:8a:92:ba:06:f4:6a:
         03:7c:78:ee:1a:2a:cb:17:ec:bc:f3:f6:cc:aa:71:2d:3c:a6:
         77:2d:eb:33:23:ee:27:66:5f:0b:ac:a0:06:93:55:88:0f:20:
         be:12:4d:76:85:dd:f8:93:ab:f2:01:8c:25:18:45:3f:33:ce:
         77:f1:79:37:99:ce:7d:57:1b:d4:e3:00:9e:9e:e5:8b:39:a5:
         28:fb:4d:89:f7:31:76:a4:1f:b5:ef:51:1b:09:58:68:c2:32:
         f7:75:0f:30:49:ee:88:51:1b:4d:53:57:7d:32:44:a7:80:ff:
         43:90:1e:aa:65:88:38:de:0e:b5:05:c3:bb:d5:0e:35:8f:51:
         44:34:5e:1b:2d:3b:ce:a3:84:c2:23:0a:97:d5:4f:c0:06:9b:
         b9:ca:64:d3:10:39:cd:d6:11:6b:e0:68:66:ca:63:f3:f7:f3:
         9a:42:9c:e6:84:d4:a6:71:e1:97:67:6f:0d:2b:f1:93:da:f4:
         82:e0:ba:76:3b:1e:8f:4e:5d:d5:cf:7d:f0:65:da:13:d7:4c:
         0d:00:eb:20:c9:1e:51:d4:82:ad:c7:22:84:c6:e2:4e:6d:60:
         f1:34:58:da:4b:cb:87:d9:6b:68:ac:3d:3b:2d:3f:75:7e:ed:
         58:e4:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:14 2025 by rpki-client