Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa
File:                     25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa (raw, json)
Hash identifier:          4PwNVwPguIKtgZQVjlfvodKd78ujDSyvWKUhLzhDjJ8=
Subject key identifier:   BA:16:0C:4E:02:77:53:DD:24:C6:72:46:4E:CA:7F:71:CA:BD:52:98
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B5B074B9C4AC2FA267CCFB580
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     394437
IP address blocks:        66.60.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4b:9c:4a:c2:fa:26:7c:cf:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=f46f864b-3cf3-4966-a5b0-1ffb664fd301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:ed:f7:7f:fe:64:84:67:05:5f:1c:e8:52:
                    d5:1c:4b:69:1c:76:53:c4:17:3e:78:0a:76:4b:b6:
                    46:53:53:e1:99:85:48:c6:97:7f:36:ce:98:96:c6:
                    4a:ad:78:74:d2:6c:ca:52:a0:41:7f:b1:b5:53:b4:
                    2d:ac:11:e1:8e:a0:6e:1d:70:f5:5e:3c:31:55:fa:
                    23:1c:99:60:3f:18:03:3b:a9:e0:c5:c6:58:bb:04:
                    91:bb:25:a1:14:77:3c:68:2a:12:cf:1d:6e:f4:86:
                    7d:9b:ac:4e:1c:7f:24:e7:d7:07:ce:ee:00:dd:d4:
                    4a:b7:3c:b3:80:11:f9:d8:e4:4a:6f:99:79:7d:79:
                    34:6c:19:28:71:0b:80:e1:5a:7d:3b:7e:75:42:25:
                    d8:93:f2:3d:40:18:da:be:7e:b0:1a:08:3b:34:45:
                    02:e2:cd:7a:64:3a:b2:5b:4f:26:33:3c:77:79:de:
                    1a:8a:20:9b:06:76:67:f3:26:5a:47:de:c7:40:c1:
                    5c:4d:46:05:84:70:de:76:0a:d2:d0:26:7c:09:3f:
                    e0:01:9b:22:bb:27:8b:db:10:f5:65:49:7a:92:50:
                    45:15:67:21:d4:76:09:b2:fc:ae:97:53:c9:f0:15:
                    f4:3c:f4:65:12:fc:da:4c:e2:e0:fa:c2:6a:68:25:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:0C:4E:02:77:53:DD:24:C6:72:46:4E:CA:7F:71:CA:BD:52:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:29:52:1d:b6:73:ce:54:dd:c7:bf:af:32:b7:b1:4b:17:
         76:ed:53:ee:f7:b7:4d:53:ee:cd:98:6d:54:13:ec:44:d4:31:
         ad:4f:da:8c:ab:32:8f:47:bf:7c:79:d1:b3:7d:fe:02:2f:97:
         31:b1:f8:a1:63:d6:c1:b4:1e:37:b8:e4:ce:8c:90:aa:7a:3e:
         42:86:37:42:96:e2:36:99:53:6e:a4:a7:29:19:ad:13:55:bf:
         ef:d4:b8:5d:83:49:69:cd:7d:88:60:4c:00:53:0e:dd:ba:11:
         dc:81:a8:27:9d:b4:41:14:d3:68:f7:ae:7d:97:e3:fb:6e:46:
         5c:aa:9c:e2:94:d4:23:53:03:fd:98:d8:7e:86:e3:49:35:d8:
         17:19:cb:76:eb:99:7c:3d:cd:65:6a:fa:d5:34:7c:70:5d:d1:
         f1:7d:71:bb:a5:de:1e:b2:de:19:0a:51:74:54:85:42:a9:c1:
         a4:3d:30:27:01:4c:4a:fb:5f:64:99:1f:95:b7:66:08:5c:f0:
         72:35:be:a1:d1:ab:4a:49:7e:dd:3d:8b:09:6d:41:b3:a6:12:
         d3:de:c6:2a:22:fc:31:ff:d3:98:0f:05:42:e3:59:fe:8c:8c:
         f3:88:ca:33:05:7f:b7:43:0c:38:58:fd:36:d3:8e:d8:ea:a1:
         b4:31:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:07 2025 by rpki-client