Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File:                     933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier:          /eQ8XwEnlUyFreUgG+onbBcVrNgDx+kEkyLDN65BPbs=
Subject key identifier:   D0:E9:74:72:27:F4:26:F7:6F:E0:83:7C:CC:6C:7F:A0:0D:2D:51:D5
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B9E07B5673A0665B7283E7AC0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     2734
IP address blocks:        66.35.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b5:67:3a:06:65:b7:28:3e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=0b9b9864-fb11-4cc1-9cd4-3e27536a6ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:91:e7:ae:b9:f2:dd:8e:2f:9a:76:18:8e:
                    00:99:ed:a1:54:94:68:d9:d4:fe:06:e9:50:e1:65:
                    d7:4e:92:29:0c:e7:8a:b4:1d:6e:89:b6:5d:87:1f:
                    e3:e3:4f:e9:77:de:2b:c8:61:e0:3f:3a:3b:ab:ee:
                    ae:72:48:a8:98:37:00:7a:96:ab:a0:f9:02:cd:73:
                    2b:79:e2:59:06:b0:b5:b8:71:50:b9:11:3c:13:1e:
                    46:94:20:76:08:93:bb:82:5b:d7:23:0b:76:3d:54:
                    73:27:4f:42:02:e0:e9:6f:c0:c0:30:b0:70:b0:df:
                    c2:56:f2:8a:62:bf:f5:d1:7f:b2:f7:82:11:ba:5d:
                    b2:b7:f0:4a:14:04:0d:9d:9c:ac:2d:d8:1b:03:38:
                    34:37:b8:c9:83:f8:a2:db:e7:4a:90:48:01:c8:88:
                    a4:c9:c1:30:0a:26:f1:14:3e:19:d8:14:57:70:42:
                    a8:27:bc:ca:bc:3f:94:e7:30:8d:1a:80:a9:ac:ec:
                    2f:15:f5:3c:6a:c7:d0:b4:8d:86:f3:04:fe:c0:d5:
                    f9:27:49:32:ea:34:73:ae:d3:ff:be:3c:24:7e:66:
                    ca:8b:c0:06:2b:4a:82:8d:e3:e2:77:f1:6f:43:b7:
                    d1:70:85:0a:65:0a:26:6d:64:12:c5:d7:68:e4:f6:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E9:74:72:27:F4:26:F7:6F:E0:83:7C:CC:6C:7F:A0:0D:2D:51:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:a9:16:f8:b1:6b:cb:3c:db:05:ba:0b:9c:df:af:1c:b1:
         ba:6c:8c:3d:ff:83:f4:22:03:5c:92:b3:f9:6e:20:6e:e0:08:
         d5:ad:6d:3d:bd:77:29:6f:57:00:d3:28:75:8e:8f:41:dc:a5:
         06:5e:be:82:0f:51:70:fe:ad:e0:7e:bc:ba:63:3b:66:64:98:
         8b:45:17:f0:35:cd:80:44:29:e1:37:2b:07:69:fe:6f:85:0c:
         03:f3:c3:58:5a:af:b5:79:c6:31:b1:4f:aa:03:be:96:55:4a:
         cf:3c:a2:15:bc:6c:4e:17:0d:c6:8b:eb:a2:17:be:13:ce:69:
         bd:57:e3:48:ef:84:f5:41:a1:f2:6c:bb:e3:9e:bd:3f:89:39:
         1a:8c:50:98:0d:41:d2:c8:ba:be:fc:6b:95:5e:f2:1a:6b:96:
         65:87:63:ea:03:6b:d6:b8:60:d3:74:6d:e6:ad:8d:83:59:89:
         e2:7a:14:a1:fd:90:a8:39:45:d4:86:31:c4:2c:71:5b:7d:d7:
         5f:94:be:59:e2:ff:0b:b5:61:7a:12:d1:24:d7:6c:8a:ac:be:
         e9:3b:11:4d:c9:03:91:04:c5:4a:56:e4:2f:2b:d8:9d:19:6f:
         60:3e:8a:f5:4a:6b:80:84:2d:d7:6d:be:a4:bb:e7:ae:cc:ad:
         a1:2f:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:17 2025 by rpki-client