Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
File:                     09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa (raw, json)
Hash identifier:          NpoKZnK/vxwzaab/JibIrqc5N5uxB5QBC1TWPoYWBXA=
Subject key identifier:   0D:EE:6F:B2:ED:2E:46:76:95:45:6F:DA:C5:4C:29:C9:D2:E4:47:BC
Certificate issuer:       /CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Certificate serial:       010D0C9F4328584B76F22C7431F443CAD62CE570
Authority key identifier: D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     20419
IP address blocks:        66.133.64.0/21 maxlen: 21
                          192.132.8.0/24 maxlen: 24
                          199.21.152.0/21 maxlen: 21
                          199.96.112.0/22 maxlen: 22
                          208.92.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2c:74:31:f4:43:ca:d6:2c:e5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=655cd742-2301-47d3-9101-74b5581b531e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:d1:34:19:8c:01:df:50:10:39:8b:0f:c7:
                    f4:6c:be:d7:5f:df:bb:f3:d7:6d:9a:d6:5a:31:0f:
                    b7:e4:17:2c:3c:74:ca:66:9b:1c:50:30:89:fa:48:
                    01:98:70:ec:59:54:a2:27:f8:6c:14:4a:98:c0:5b:
                    d8:d9:14:0c:24:36:e8:07:f9:f8:28:6b:aa:05:58:
                    34:d9:57:7d:17:5d:d9:4b:d3:5e:83:a3:ca:34:59:
                    30:b5:b0:88:5f:6a:fc:0d:55:d9:cd:96:8f:1e:a2:
                    af:bc:bd:4d:e9:57:18:9b:1e:fa:dd:19:07:f4:fe:
                    63:12:27:66:fc:a4:79:6f:22:7d:b3:e0:83:39:d0:
                    f5:82:ed:b0:a0:fb:48:78:da:3a:a7:aa:bf:b1:79:
                    a7:2e:ea:87:94:58:7e:00:d8:f8:93:fe:a9:99:ee:
                    16:a5:4f:6a:65:a2:76:ac:c5:79:75:27:9a:7a:5b:
                    d0:bb:77:ec:ed:87:63:47:a8:e8:9c:2f:e9:91:ba:
                    9f:1b:49:9c:8e:25:2b:27:da:bd:0d:0f:fd:a0:86:
                    67:ac:16:dd:13:ef:0b:80:4e:1e:c5:8a:a3:5d:20:
                    9e:49:df:83:de:16:19:91:ad:b3:e0:9c:4e:d8:cc:
                    aa:9b:b9:72:2a:82:98:1e:9c:e0:59:c5:b5:39:4b:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:6F:B2:ED:2E:46:76:95:45:6F:DA:C5:4C:29:C9:D2:E4:47:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl

            X509v3 Authority Key Identifier:
                keyid:D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.133.64.0/21
                  192.132.8.0/24
                  199.21.152.0/21
                  199.96.112.0/22
                  208.92.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:42:10:ca:70:fc:d4:ca:09:36:d4:ae:97:1d:5c:21:6f:b9:
         df:ba:82:8c:c7:48:37:a1:ec:dc:93:84:09:07:b7:48:ac:77:
         d6:ba:2a:30:c2:47:05:88:11:ef:a8:0d:13:c6:8f:6f:cf:a0:
         7c:48:0a:94:86:79:38:21:a4:6e:c2:fa:34:56:f3:da:13:61:
         ea:a3:8f:76:e6:96:6a:51:f8:0b:7b:d3:c7:4f:45:2f:b5:e8:
         97:0d:14:33:13:da:47:95:ff:2b:1e:0e:60:a7:bd:9b:6e:95:
         a4:eb:d8:43:23:b9:57:fb:f4:fa:88:58:99:f8:0d:cd:ca:cd:
         d9:74:fd:a3:d9:a0:f5:ce:51:ce:ac:b5:ca:1c:66:cb:78:95:
         3f:66:7c:15:17:e0:ae:fb:f5:44:65:69:65:da:b5:6b:76:33:
         8c:31:6e:66:de:89:14:20:a3:dc:4a:8f:d7:4e:49:bc:89:a1:
         4c:58:08:15:2a:91:78:1a:58:4c:8a:56:9b:33:4b:8b:52:ed:
         e0:32:20:c6:c0:e5:eb:c9:3d:87:df:55:a2:3c:9e:06:a9:38:
         40:06:15:5f:e1:e6:ae:ed:21:f1:e0:79:a2:1e:e1:98:a2:14:
         fd:e0:b0:02:da:86:d9:f4:14:ee:55:73:bb:c3:15:28:0a:f1:
         ce:c1:00:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:27:03 2025 by rpki-client