Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
File:                     639cc8ac-4937-3f41-868f-e73eeac09322.roa (raw, json)
Hash identifier:          SV85x+fEsWPOsCxMMtVnmDflvsYd4rLFn3AMR01Ul+M=
Subject key identifier:   94:90:98:5C:00:18:08:B1:4E:E6:B0:0A:67:C8:64:B3:02:2F:F1:95
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584BA932515427A98D80DB34C550
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     398395
IP address blocks:        45.59.115.0/24 maxlen: 24
                          45.59.121.0/24 maxlen: 24
                          66.23.194.0/23 maxlen: 24
                          216.126.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:51:54:27:a9:8d:80:db:34:c5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=bc30b1ce-1305-406c-b47f-4b040e2b2ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:7d:5d:72:18:8e:5c:e9:83:6d:f9:e4:b0:
                    fa:e5:97:e4:36:2e:0b:78:ef:03:bf:e5:19:1d:3b:
                    33:f7:3f:48:cd:ac:b0:68:09:d6:ed:13:46:bf:e5:
                    03:aa:b5:9a:70:62:c1:3a:60:d0:ec:59:60:bf:53:
                    8b:a8:99:96:78:0c:e8:fd:a9:b4:dd:4e:45:d4:da:
                    83:66:d7:3f:6a:e3:98:f8:b4:b3:0e:ab:dc:37:e4:
                    24:ea:66:ac:f0:cf:49:0a:e9:ff:ce:a8:4d:0d:77:
                    d2:5a:84:6d:82:64:38:ec:6a:2a:79:b5:a6:8f:21:
                    b0:3c:cd:42:0a:e2:82:c1:bd:be:a8:04:00:ab:32:
                    ce:6b:19:df:fb:78:ec:62:03:da:2e:ff:9d:33:d5:
                    6f:5a:fa:27:29:d7:ac:a4:9b:f2:96:72:38:7c:14:
                    9f:0a:01:96:1b:70:19:58:97:c4:49:73:07:cb:07:
                    90:4f:cc:46:60:cb:a3:fc:9c:93:0d:a4:cb:06:75:
                    49:f2:b3:32:97:f1:0b:38:57:59:55:65:fd:60:ca:
                    47:e4:11:c1:d5:48:89:02:9d:c5:e2:a5:54:cb:6e:
                    5f:ff:13:f6:e0:fb:ba:63:be:c4:44:03:e7:20:3c:
                    bb:f4:b5:ba:67:82:0e:28:4c:f5:56:a1:7f:9b:3d:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:98:5C:00:18:08:B1:4E:E6:B0:0A:67:C8:64:B3:02:2F:F1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.115.0/24
                  45.59.121.0/24
                  66.23.194.0/23
                  216.126.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:94:68:05:f7:b3:7d:4d:23:80:14:cd:fb:d1:7d:47:64:
         82:69:b9:d3:b7:28:8a:74:9c:5b:9f:45:c2:06:d0:fb:14:eb:
         ff:ad:8a:09:cf:3b:18:93:c3:5a:bd:f7:9f:39:2b:38:67:23:
         b0:9c:4b:ce:4b:df:ad:5a:5e:a4:24:15:9b:70:64:26:53:5b:
         be:e6:93:9c:db:a1:ec:06:db:2b:24:a7:c6:2a:86:ae:58:35:
         ff:f8:8b:7b:c3:31:fc:1a:c0:74:a8:5d:ed:92:ee:72:2d:c5:
         7c:88:c6:1f:c9:e2:c7:93:53:d3:18:fb:7f:e4:73:27:eb:f5:
         3c:51:bd:58:b3:e3:df:ba:c2:ce:95:ca:fb:36:d9:43:18:c8:
         bc:76:31:d0:2c:d9:ed:53:b0:83:53:2b:cf:6f:31:33:07:6b:
         57:64:61:74:ca:cb:64:b2:5e:d3:df:da:d6:ae:e1:7d:b3:a5:
         c6:32:ab:88:6c:cf:03:0b:fa:3a:fd:c0:b1:52:57:b3:e9:5a:
         8e:0c:e9:61:4d:12:73:52:10:31:75:f1:39:52:c3:d4:14:05:
         80:9e:48:88:f8:fa:6b:10:66:ee:89:e7:a2:37:25:80:59:9c:
         43:82:6e:6b:3d:62:ab:b5:6f:4a:55:e0:bd:ee:da:28:38:4c:
         cc:74:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:27:59 2025 by rpki-client