Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4b0ac6a-3161-3ffc-9ded-c3c7f99b7723.roa
File:                     c4b0ac6a-3161-3ffc-9ded-c3c7f99b7723.roa (raw, json)
Hash identifier:          DjWoDM/jJUDDPRC50ZhAeRaXjDKUTuA0/AJNMM3qgcY=
Subject key identifier:   9B:D8:F1:C3:0F:E1:EA:22:22:BF:A2:E4:8F:9A:0C:39:9A:0B:63:2E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BAC23D6134AC87735B8AFAE00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4b0ac6a-3161-3ffc-9ded-c3c7f99b7723.roa
Signing time:             Tue 28 Oct 2025 14:18:56 +0000
ROA not before:           Tue 28 Oct 2025 14:18:56 +0000
ROA not after:            Mon 26 Jan 2026 15:18:56 +0000
asID:                     30058
IP address blocks:        64.105.80.0/23 maxlen: 23
                          64.105.82.0/23 maxlen: 23
                          64.105.86.0/23 maxlen: 23
                          64.105.94.0/23 maxlen: 23
                          64.105.208.0/23 maxlen: 23
                          64.105.210.0/23 maxlen: 23
                          209.101.0.0/23 maxlen: 23
                          209.101.2.0/23 maxlen: 23
                          209.101.4.0/23 maxlen: 23
                          209.101.6.0/23 maxlen: 23
                          209.101.14.0/23 maxlen: 23
                          216.175.208.0/23 maxlen: 23
                          216.175.210.0/23 maxlen: 23
                          216.175.214.0/23 maxlen: 23
                          216.175.218.0/23 maxlen: 23
                          216.175.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ac:23:d6:13:4a:c8:77:35:b8:af:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 28 14:18:56 2025 GMT
            Not After : Jan 26 15:18:56 2026 GMT
        Subject: CN=55fe7fbc-6cab-4feb-95ea-7ea1d1f2873d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:0f:0d:30:9c:58:43:b1:1b:46:6f:2d:93:
                    27:18:2d:10:ba:51:c2:5b:c0:86:24:a4:87:2a:6b:
                    44:74:03:b0:ba:87:8b:2e:1b:a4:90:20:8e:52:ec:
                    76:fe:20:f4:c4:52:67:30:37:e7:7c:ad:59:24:10:
                    a3:f5:a1:b6:12:1d:1e:f1:a0:90:8d:00:73:77:14:
                    0b:36:31:75:ec:24:5c:75:89:59:6a:6d:9c:1d:37:
                    d7:05:47:f5:88:88:84:ca:6f:a1:36:a9:0a:1f:e9:
                    b2:e2:d9:70:81:21:c5:77:3b:f5:31:c8:2a:18:cc:
                    fc:96:8c:ae:16:db:c6:72:ff:11:f3:f1:bd:ae:f2:
                    d0:72:ec:2b:7d:94:38:2d:b6:04:ec:02:db:92:53:
                    8b:4d:52:87:69:f5:7a:9a:7f:5b:bc:a1:75:61:0d:
                    aa:b4:22:e0:0f:e7:cb:e1:7b:c0:e0:56:51:8e:11:
                    37:08:1a:b1:d1:25:39:8b:c3:cb:4d:86:63:88:cd:
                    2b:48:6a:4f:07:34:9a:01:b1:74:71:a9:b0:a7:35:
                    e1:22:0f:ea:64:a8:44:eb:93:ac:7b:b4:ae:ee:bc:
                    09:f8:5b:74:d6:c0:46:58:7c:5d:1c:15:0a:e3:af:
                    e2:b4:6b:9f:e5:cb:65:e0:c9:92:53:ed:38:42:54:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:F1:C3:0F:E1:EA:22:22:BF:A2:E4:8F:9A:0C:39:9A:0B:63:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4b0ac6a-3161-3ffc-9ded-c3c7f99b7723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.80.0/22
                  64.105.86.0/23
                  64.105.94.0/23
                  64.105.208.0/22
                  209.101.0.0/21
                  209.101.14.0/23
                  216.175.208.0/22
                  216.175.214.0/23
                  216.175.218.0/23
                  216.175.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:5e:9d:cf:2f:50:5a:36:6d:03:9b:c6:9b:1e:fd:9e:b9:
         43:b9:e7:c0:23:d7:92:57:19:5a:ad:74:f7:85:f5:eb:88:71:
         66:b1:21:aa:d4:4a:f9:c2:0d:a8:5d:72:f4:33:6d:4f:dd:f5:
         f6:dc:1b:2d:9f:4a:48:4b:67:b0:75:a5:a2:0f:ac:03:1b:e1:
         3f:43:47:e4:2d:db:04:f3:7a:35:20:50:01:6f:cb:84:88:c4:
         bc:d1:27:1f:66:cc:7b:94:a2:40:b7:82:c2:1a:0f:cd:00:a7:
         04:03:ae:93:ed:fe:fe:01:3c:6b:e5:37:0a:94:d1:16:10:65:
         fc:52:3b:cf:17:91:d2:f1:89:dc:2b:9e:8f:63:fc:92:ff:20:
         3b:ff:45:bc:08:f4:14:47:7d:4c:68:d1:13:f6:e7:7e:a8:7b:
         fc:c9:bf:d4:71:a4:d3:2d:e8:46:fb:9f:b2:ec:6a:20:7a:b9:
         87:43:b9:a2:d4:25:e1:d6:cf:b9:0b:aa:33:4d:3f:4e:26:60:
         8e:01:2e:20:28:52:4f:25:6e:67:34:e9:73:31:80:d7:ba:1d:
         77:fe:2c:8d:3d:57:9a:62:8c:ab:e9:19:6e:6d:0b:93:1d:65:
         d0:83:f7:3c:a1:6a:a8:11:3d:39:4b:34:53:52:1e:7b:c5:ce:
         9f:69:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:44 2025 by rpki-client