Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee51d566-840e-3a76-9fe6-f17a3b54c87a.roa
File:                     ee51d566-840e-3a76-9fe6-f17a3b54c87a.roa (raw, json)
Hash identifier:          hs0ZuOdnwodkEw7sjcYfDxYdFEG98fgiz8IhMbd2J4Y=
Subject key identifier:   4C:06:89:94:19:B7:10:2B:51:FC:71:31:92:5C:77:E1:8C:6A:15:2B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584BBE405B445B05C9EF862D4004
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee51d566-840e-3a76-9fe6-f17a3b54c87a.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     30103
IP address blocks:        137.66.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5b:44:5b:05:c9:ef:86:2d:40:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=eb86f508-61e2-4212-a1b0-b8777a229893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:9f:6d:f2:88:f2:54:db:a9:dd:81:3d:6b:
                    d0:0b:9e:a2:a0:fa:45:ad:d5:b3:cb:43:75:c5:06:
                    31:0c:5a:cc:c9:ac:90:28:18:7b:ad:7b:b6:48:d9:
                    3b:e3:9f:8c:de:cc:f5:b4:8a:f6:27:66:24:26:5f:
                    39:03:cb:5b:18:66:6c:e2:41:fd:a8:a3:82:55:2b:
                    17:bf:b6:f4:37:e0:00:f6:9b:27:13:d1:a9:bb:b5:
                    58:55:bf:b4:2b:2f:47:88:c1:26:c0:8f:96:e6:28:
                    68:96:79:3d:12:b2:84:b7:7a:30:e5:38:50:ec:a6:
                    21:2b:f9:b5:a6:48:96:82:1c:7d:45:56:91:1f:2f:
                    cb:7d:f5:b2:0f:5e:74:45:5e:25:8d:ed:92:67:1c:
                    14:15:c5:a1:03:01:c7:72:ce:c0:e9:21:7d:6f:22:
                    53:09:67:9d:8e:8c:de:4e:10:c0:fa:55:33:a7:0a:
                    35:b9:5f:5e:13:ef:a2:a4:1c:26:3f:52:c2:98:0c:
                    26:6b:aa:91:5a:a5:a9:cd:85:8a:43:66:5f:01:e6:
                    51:0a:dc:aa:27:09:e3:48:1f:2c:14:ac:e7:5b:43:
                    24:cb:5b:42:50:b6:f9:1a:fd:60:9e:1d:8e:f2:09:
                    c5:92:68:ef:4c:cc:e4:29:c3:a3:c0:bc:22:cd:61:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:89:94:19:B7:10:2B:51:FC:71:31:92:5C:77:E1:8C:6A:15:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee51d566-840e-3a76-9fe6-f17a3b54c87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.66.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:c6:31:21:7b:ae:d4:62:90:3f:61:9a:de:1b:e5:8a:a2:
         76:67:d0:10:e3:fb:8b:62:ca:7a:e4:a3:13:34:bd:a8:1a:5e:
         50:48:50:31:43:42:e0:fd:3f:8e:fe:06:60:29:5e:1c:0b:f2:
         f5:f1:c0:95:27:85:56:21:fc:c0:12:ee:bb:13:d3:26:3b:14:
         b6:44:78:68:fa:30:b1:2d:30:55:81:c7:c8:b1:7e:8d:ba:9b:
         05:75:99:5a:a1:f3:85:18:a8:66:e2:dc:3b:9f:d0:ad:76:94:
         7e:10:6a:e2:55:a2:be:d5:59:cc:2f:3c:f4:76:99:6b:6c:1b:
         d4:b0:dc:04:5a:df:b5:e0:30:26:17:f3:f4:95:ba:8c:90:0e:
         bd:14:83:3c:72:10:cb:c2:5b:d4:50:3e:d1:f0:a0:e3:82:2a:
         a8:47:82:9c:91:9c:2c:59:b0:64:52:21:60:45:29:3b:07:67:
         5e:bc:96:79:7d:cb:09:d3:26:56:24:1a:c6:73:03:74:e5:1e:
         3a:80:de:a4:d0:98:4d:99:3b:d4:50:2e:30:bd:8e:5d:2b:83:
         98:f2:f4:8d:1d:5b:fd:3d:21:c5:04:2b:9e:7c:cf:89:2f:a2:
         98:90:2f:ea:e0:1c:63:8a:9a:cf:a4:6c:45:da:41:5b:3e:76:
         9b:ea:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:52 2025 by rpki-client