Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d133fc2a-0103-3231-8f01-6474626616f9.roa
File:                     d133fc2a-0103-3231-8f01-6474626616f9.roa (raw, json)
Hash identifier:          oxmevaa1MzNj5cFLzDqhHyKXGm5BA1FNibNMRIhmQ1U=
Subject key identifier:   73:7C:80:5D:B4:AB:40:B4:65:70:A2:64:06:DF:DB:EE:97:DC:92:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E6E639BC8D71DBE87F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d133fc2a-0103-3231-8f01-6474626616f9.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54288
IP address blocks:        65.19.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e6:e6:39:bc:8d:71:db:e8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=63af56e9-3c88-4e99-a60e-58754feba207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:0f:4c:57:9e:90:c7:fc:bf:66:67:41:d1:
                    cc:58:ed:33:60:c1:ec:69:ab:02:4a:b5:0c:00:1c:
                    87:19:51:70:df:64:ca:9a:e1:23:10:6f:21:58:ce:
                    2f:89:5d:20:14:04:a5:80:0f:45:0a:f0:cb:c5:a6:
                    0e:c5:38:2c:35:02:fc:e9:72:de:06:fa:a2:38:91:
                    c2:70:c0:2a:ec:4c:b6:e2:28:bb:18:58:c5:48:f1:
                    55:be:40:08:22:44:79:48:46:d3:12:b5:f0:aa:c3:
                    a0:2b:e5:47:57:26:c5:2e:f2:75:a6:8c:8f:a4:ca:
                    11:ae:7a:85:ae:5e:1b:87:8a:68:15:ac:23:e4:fa:
                    f9:ea:9e:00:d0:ae:d9:43:74:ce:60:0b:ee:b4:62:
                    7c:d4:53:d8:0f:29:f9:ba:2c:84:94:17:df:bc:62:
                    ee:78:64:d7:1e:80:a7:c7:3f:e6:b9:08:b5:3c:75:
                    bb:f7:50:5f:f8:a5:30:3a:6c:17:79:e4:0b:dd:9f:
                    a5:91:15:44:f8:9d:78:34:8b:4d:a6:47:b8:4c:ae:
                    27:c2:ee:fd:03:fa:74:ed:fa:3a:49:1d:51:49:84:
                    da:fa:42:ce:2c:b9:ca:1c:04:ac:7f:05:b8:97:ab:
                    7b:2c:47:d2:94:3f:6e:77:92:4b:8d:2a:db:2e:99:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:80:5D:B4:AB:40:B4:65:70:A2:64:06:DF:DB:EE:97:DC:92:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d133fc2a-0103-3231-8f01-6474626616f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:5f:ac:63:9e:e8:d3:4a:e6:7d:6d:ed:2e:f2:36:02:e3:
         8a:16:d8:27:15:3a:37:b9:48:e9:9e:99:08:f6:eb:81:5b:20:
         99:44:1f:28:f2:4b:90:fa:ee:3e:61:05:d0:66:dd:e7:0d:02:
         d7:21:fe:4a:d7:14:bd:48:37:02:11:92:fe:70:35:22:42:6b:
         e0:96:87:01:84:c5:4f:9c:e4:80:c1:bb:f4:b5:a0:9a:d5:9a:
         ce:62:83:69:53:d3:b9:1f:f5:ec:7b:1e:5e:24:86:be:31:77:
         2d:0c:a3:45:e3:c6:7d:5f:e8:dd:24:6c:23:1e:66:d8:fa:6d:
         41:bf:48:cc:b4:33:80:70:3e:32:85:95:c6:02:ec:f7:e9:ae:
         9e:05:1f:7d:4f:b3:f7:e7:2b:0a:25:af:0f:e4:c3:d5:c6:20:
         bb:c2:21:e7:4b:9e:48:af:5d:f4:8f:fc:03:5b:3a:8d:3e:94:
         c3:5d:b9:89:8e:e2:45:20:1d:3c:3c:65:a3:d8:57:4e:d0:98:
         30:c0:3b:0c:01:c4:9a:b2:97:d2:bb:8a:67:6f:e7:b1:47:63:
         43:03:35:53:9d:b7:8f:0b:8f:82:1c:67:07:5e:22:a2:29:8c:
         e3:40:f6:2f:a1:fd:30:a9:4a:67:e7:a8:06:67:ca:4a:18:20:
         3b:66:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:25:33 2025 by rpki-client