Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa
File:                     f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa (raw, json)
Hash identifier:          QWsBV0NIGCmBIKeNX9yY/RpD2iqFn17pHgvypdZclPE=
Subject key identifier:   E0:DE:51:A4:BF:3E:EB:06:32:5C:2D:FF:DD:8A:1E:2D:43:24:64:B8
Certificate issuer:       /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial:       010D0C9F4328584B2A2C3102C00F1B7278633E00
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     23465
IP address blocks:        66.103.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:31:02:c0:0f:1b:72:78:63:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=6d909c39-929b-4b2f-80e0-939b10590b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:0a:e0:72:16:55:77:be:27:1b:9d:0e:7d:
                    90:ed:3a:24:35:58:e6:62:04:e2:2c:f1:18:67:80:
                    f0:89:ed:37:27:08:e9:1b:10:11:f3:9e:cd:38:2e:
                    bb:2c:44:30:33:0b:52:52:a1:9f:63:04:37:fe:a8:
                    dc:32:5d:fb:fd:97:64:97:61:e5:09:8f:6b:b6:fb:
                    d6:d5:65:0d:3d:34:df:61:83:29:6e:b0:1b:aa:6b:
                    c1:52:89:a7:2c:c0:53:02:1b:bd:7e:3d:eb:94:11:
                    72:f4:b4:78:9b:00:e3:a8:59:07:8f:7f:18:f6:1b:
                    39:1a:a2:0c:f1:ac:c1:6a:59:7e:82:a4:dc:da:dd:
                    e4:8f:24:42:85:a2:a1:8f:bf:ef:f1:63:47:61:a6:
                    7a:fd:9b:2a:2d:b1:6e:dc:5d:d5:68:be:1e:6b:50:
                    ab:aa:76:8d:1b:67:d6:8a:fd:df:02:d9:ff:bd:56:
                    07:51:bf:be:93:cf:27:59:55:42:2b:0e:6b:89:13:
                    a0:99:ed:30:a8:e2:56:fe:12:31:bd:fe:21:e5:73:
                    86:c4:1b:47:f8:77:3b:43:7a:bb:46:72:79:7e:0f:
                    2e:8f:ed:e8:ab:c9:14:9f:4f:e3:24:45:08:8d:05:
                    d9:17:fc:6e:c5:95:db:c7:31:80:9a:ea:da:4f:6a:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:51:A4:BF:3E:EB:06:32:5C:2D:FF:DD:8A:1E:2D:43:24:64:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/f3e7bcd2-9bd4-36ef-a982-ed43871e7f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:d3:78:fe:92:56:1e:4f:96:f3:d6:14:a8:6e:b0:d7:fb:
         5d:4f:b7:0e:b3:5c:43:d2:9d:27:49:03:62:f7:38:2e:e9:4b:
         49:1a:4c:85:23:d1:79:64:0f:90:92:71:28:21:70:0e:b1:b0:
         b6:1b:4f:2d:40:4a:14:29:73:57:22:f9:94:4d:27:bf:42:b1:
         7c:c5:4a:20:57:2c:0d:87:a6:af:8d:2b:ab:e9:b8:e6:6c:01:
         3b:15:93:0e:68:49:dc:0f:db:36:90:6c:72:a1:c9:f9:73:e8:
         2b:21:d6:70:7d:10:8c:d1:21:78:22:45:3f:8a:72:ff:eb:fa:
         c9:ed:df:51:66:9c:49:2e:14:9b:db:07:81:da:ca:95:4b:a8:
         b7:b4:60:99:08:89:dc:8e:37:b5:53:07:90:53:42:17:50:96:
         b5:b9:02:65:1f:17:5c:b4:b3:17:3a:7f:85:ed:46:01:d3:42:
         e1:74:28:d1:be:b6:8b:25:9e:cf:4b:a4:c5:de:5f:98:c6:d2:
         c7:19:71:e5:c7:fa:a9:1e:7a:61:4a:ef:8d:a1:e7:01:71:81:
         48:6d:10:6f:ce:eb:bf:43:e3:41:73:a5:7a:b7:d4:e2:5a:29:
         95:20:d8:94:92:54:f5:33:a2:3f:29:5b:5b:df:b2:a0:62:6c:
         93:87:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:11 2025 by rpki-client