Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa
File:                     66b541b0-25dd-3821-87bf-548208b06065.roa (raw, json)
Hash identifier:          n05i7tyqSSJchxVr4+aOtrDXjwlqLqoEzMH8eOAlg0o=
Subject key identifier:   58:40:65:FB:FA:5C:33:B2:CF:D3:16:AF:A5:6F:AC:3D:33:D0:D1:F9
Certificate issuer:       /CN=61076595-f39c-462e-b686-d3fcac2df32b
Certificate serial:       010D0C9F4328584B6632010E1F9155F5FCF35B80
Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     36222
IP address blocks:        199.201.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:01:0e:1f:91:55:f5:fc:f3:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=3453c294-1168-4fa7-bb8d-6f70ede3fc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:a6:a2:4c:05:63:ef:9c:7c:5c:23:c5:a4:
                    82:2c:27:e9:02:e4:57:b8:05:c5:90:44:3f:02:64:
                    92:5e:f7:03:78:9d:c2:30:ad:b9:66:0a:9a:64:f0:
                    91:3c:93:3c:46:80:c1:cd:51:c0:8d:25:91:70:aa:
                    c0:23:a7:87:fe:fe:e8:b3:e0:1c:41:98:bf:fd:e4:
                    08:0a:25:af:4c:f4:af:66:f9:f3:45:78:b2:ca:6e:
                    2c:1c:a0:1b:0f:f4:5f:e6:e6:fb:5f:86:c8:92:99:
                    c5:da:cf:d2:94:c0:87:87:3f:ea:24:b7:ed:da:d5:
                    53:f4:3e:69:61:22:e1:0b:fb:e8:e0:f8:4e:38:15:
                    78:1c:c0:31:78:5a:d4:0e:97:6f:3c:2a:b5:9c:bb:
                    0e:4c:87:22:2a:d7:7c:88:33:aa:da:ba:f4:1d:16:
                    09:32:3a:a8:d8:52:72:c7:85:07:12:78:35:c3:f2:
                    27:8c:9b:0c:2b:31:42:58:0f:6f:1c:09:f2:41:34:
                    94:6e:56:1d:eb:11:78:be:ae:97:16:fe:01:a0:41:
                    1b:33:76:97:3c:81:22:7b:ca:36:8e:1e:10:84:e2:
                    94:42:9c:e8:60:f7:51:84:bb:48:7a:22:33:4c:34:
                    f8:a3:55:29:95:cf:83:03:85:f4:04:c9:49:b4:b9:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:65:FB:FA:5C:33:B2:CF:D3:16:AF:A5:6F:AC:3D:33:D0:D1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:80:cf:f3:c3:9d:7a:0a:5c:96:97:36:23:89:c7:dd:53:0a:
         f8:22:54:d6:1a:4b:e5:cb:86:8d:25:b5:28:2d:0f:b3:c8:77:
         bd:b2:d5:e8:11:7e:8d:f1:ed:bd:72:f5:60:c5:f9:e7:da:0d:
         01:62:b5:3a:d3:38:5d:44:3b:ce:94:c1:ca:ec:4b:3a:ac:4a:
         33:e1:3d:c5:c7:00:d1:d0:28:43:04:1d:d8:cd:35:a1:4b:22:
         e7:c3:d2:11:91:5e:fe:73:46:e5:62:ea:50:57:54:3f:9c:cc:
         b3:5c:0f:fa:2f:44:f4:c0:53:a4:31:37:14:8b:41:e4:4b:25:
         50:be:96:2c:54:47:90:14:21:23:b8:dd:a0:cd:fd:35:a5:a8:
         21:f6:24:5d:f5:c7:79:5d:0b:f1:c1:20:31:c6:ef:36:65:26:
         e3:9f:9c:fa:bc:86:1c:e1:43:1d:4b:33:ee:9e:d9:44:89:55:
         4a:19:8f:ca:79:34:ac:32:2b:3d:e4:e5:f7:1b:e6:98:a7:8b:
         a4:78:2d:55:4e:b4:20:ba:af:5e:85:4e:42:17:fa:2c:a5:20:
         dd:9b:bd:2b:27:44:92:41:bc:7c:b8:86:e5:14:82:8f:6a:5d:
         00:21:07:72:c8:ae:42:c1:4a:bd:ec:a0:86:eb:a5:4e:18:e0:
         ac:bb:b4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:45 2025 by rpki-client