Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
File:                     c4773e03-263c-3fd4-ac68-b27851922a8b.roa (raw, json)
Hash identifier:          zsrJyl0rkGaS2vEESEF/tv/OvPLbeOqzCjU/hqzxPEk=
Subject key identifier:   90:89:3E:07:43:AE:4F:79:BC:62:65:F0:5A:D8:49:18:96:A1:F1:F2
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B9E07B553B9E34F7A8D60FCC0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     2734
IP address blocks:        66.35.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b5:53:b9:e3:4f:7a:8d:60:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=c2aa63eb-277f-49b1-93cd-262e369c14f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:15:51:4f:71:53:79:76:92:e4:e8:bf:52:
                    5b:8f:31:48:e9:e9:ea:4d:c9:11:c7:aa:33:61:71:
                    1c:9b:db:6f:a0:c8:66:78:2d:cc:87:4f:64:e8:6a:
                    57:c2:ee:35:2d:23:de:51:f7:9c:fd:b3:5c:99:6e:
                    7c:ba:42:2d:73:8f:88:3c:23:7a:9f:47:62:0f:13:
                    eb:79:4c:5a:75:be:f1:2d:61:03:6b:12:54:02:72:
                    8f:da:62:f3:3c:0a:c7:d8:27:bc:e3:06:41:73:14:
                    b5:25:75:bd:56:f1:8c:43:1d:30:8e:93:ca:1d:0b:
                    f7:0c:ac:11:76:99:e3:48:b7:48:04:17:3c:84:ac:
                    c3:76:60:a6:c0:48:81:6e:ba:80:43:d5:6d:5e:e2:
                    d1:4b:6c:9b:2c:99:33:13:37:f3:02:5c:db:b0:cf:
                    b3:86:8e:4a:45:e5:e0:03:a6:0b:a5:ed:70:6f:cb:
                    52:77:8a:ec:b1:9e:cc:92:77:ef:d7:09:52:62:ba:
                    b3:71:8e:7d:3b:b9:fa:18:9e:b8:f0:2d:43:5f:82:
                    3b:0e:cd:d4:e7:d6:f8:8d:22:af:71:f9:4b:11:08:
                    cf:ae:9c:a2:c5:c2:13:7e:ab:77:a0:9b:8e:45:5d:
                    35:82:31:1b:5b:1f:cf:ef:1a:d4:1a:b3:26:30:b4:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:3E:07:43:AE:4F:79:BC:62:65:F0:5A:D8:49:18:96:A1:F1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:c2:20:79:c0:0b:40:3b:6e:75:a3:7e:41:41:b4:77:cf:
         87:d1:53:47:ea:3a:1e:b3:1c:bd:5a:dd:8a:61:b3:f3:94:3a:
         9c:e8:25:ed:bf:94:58:18:12:f5:3f:b3:34:55:0a:5f:cf:d5:
         6c:ab:bf:9c:89:49:e0:ae:0a:a0:e6:6a:e8:aa:ed:cb:41:43:
         fd:c0:27:55:1a:a7:54:70:9f:66:7b:17:27:23:6d:80:09:80:
         82:8e:50:be:a8:77:64:87:aa:4e:cc:81:e2:42:e9:b6:57:4d:
         ea:6a:50:e4:34:8e:1e:6b:b1:77:15:ad:96:89:24:f0:69:1e:
         46:52:e0:24:40:03:28:70:bc:c5:50:45:28:32:f2:21:2a:d9:
         d4:1c:a1:18:01:02:2b:6b:e3:dd:e6:51:cd:dd:6b:3f:00:ea:
         62:2e:df:7d:fd:81:c6:8c:d1:df:db:9c:dc:06:9b:ca:32:1e:
         39:b5:4a:db:e9:8c:7e:47:dc:be:32:3d:a6:a5:aa:18:2b:35:
         c1:b9:b6:79:15:a2:d7:63:12:af:66:03:80:b0:ca:dd:49:eb:
         05:3a:83:27:b3:70:18:1a:40:48:8d:55:9b:b2:1e:c7:c0:27:
         e2:aa:fc:05:db:ea:58:20:8e:04:e7:8f:64:0b:a9:87:c6:06:
         8f:bb:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:52 2025 by rpki-client