Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4adee954-7923-3cbf-8582-571e630db476.roa
File:                     4adee954-7923-3cbf-8582-571e630db476.roa (raw, json)
Hash identifier:          5SPUaSvSeQwReLrk2CdNK5kP7dYYXWi8EILhoz8ao/U=
Subject key identifier:   D6:3C:47:A3:16:0C:93:F7:FD:99:C4:3C:B0:2B:1A:E5:98:A2:34:E7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76D1781FFEBB5889A65B40
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4adee954-7923-3cbf-8582-571e630db476.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        65.183.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d1:78:1f:fe:bb:58:89:a6:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1b7b377a-1f74-4488-950e-232abe318fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:36:1d:56:12:9f:83:a2:17:76:28:14:cb:
                    41:6f:70:f0:64:c3:9e:42:3c:a6:26:fe:91:73:fa:
                    bd:34:b2:3c:60:5a:c0:46:02:13:c4:8b:bb:d0:6c:
                    10:bc:f9:0a:d2:36:72:34:cb:50:37:2d:fb:b4:6b:
                    24:8e:b9:e6:7e:33:0c:e8:85:59:09:63:46:bf:24:
                    a7:7f:b2:30:9d:69:44:e8:10:f9:9f:d3:ac:fd:93:
                    eb:9e:0b:5f:42:46:96:ec:b6:b0:80:ab:09:b2:6f:
                    a0:c8:7d:db:38:7c:bf:5c:fc:5b:3e:bd:48:9b:b2:
                    10:81:f4:a1:cc:e9:5e:0c:c1:ed:94:a0:46:89:f4:
                    33:87:53:e8:a8:a6:de:85:29:6e:aa:00:65:a1:ac:
                    1b:23:cf:fe:8d:2d:6b:f2:e5:fe:bd:b6:31:5c:4f:
                    bd:84:63:2b:36:1a:76:fc:a0:1f:8a:f9:6d:30:d7:
                    d6:fd:6c:6f:c6:3a:e4:a5:80:6f:e3:63:10:ac:3d:
                    75:cf:4e:9b:ac:ed:f6:f2:a3:31:6a:59:a8:98:9a:
                    1e:4c:c0:84:48:58:ed:0a:06:3f:be:8a:84:b9:d9:
                    1c:2f:88:62:80:54:4a:51:9c:4c:13:36:1d:36:88:
                    73:43:1b:41:73:e5:44:b6:a7:ab:83:7d:23:fd:93:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3C:47:A3:16:0C:93:F7:FD:99:C4:3C:B0:2B:1A:E5:98:A2:34:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4adee954-7923-3cbf-8582-571e630db476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:66:e4:fc:55:f1:34:16:54:6c:58:89:7f:3a:a7:a0:50:
         b1:02:bd:82:fd:91:62:58:27:7b:86:4f:62:36:a7:aa:8c:cf:
         dc:50:96:c9:e0:0e:99:3b:31:83:c4:3c:28:ca:67:1f:b6:b9:
         30:0c:f7:9d:18:eb:24:bb:d4:8d:10:a7:79:49:2d:f7:6d:d2:
         22:8b:29:ec:0a:a2:72:4e:a0:af:90:7f:93:1e:b4:78:ca:15:
         42:3f:36:a6:97:df:3e:3c:64:0a:b4:de:b9:c6:44:01:0d:da:
         28:5d:69:83:17:4c:6c:e5:02:e2:70:b8:72:a6:2d:fe:32:23:
         ee:b2:a2:de:65:20:d6:a4:e7:15:93:74:e9:12:de:81:c2:db:
         0f:5e:d1:b8:42:d7:d5:c9:dd:a7:d9:12:27:fc:6e:20:a5:09:
         df:76:73:06:6b:3f:c7:fe:98:40:9d:49:99:21:c0:a2:bb:1c:
         bc:5f:58:7e:87:fa:73:fd:24:61:d6:17:77:1e:95:fa:60:41:
         fc:6e:67:e0:8c:e4:6e:15:a4:cb:3f:0a:bd:b2:08:74:a3:83:
         03:cc:00:db:1e:66:47:94:d6:70:45:7a:97:1a:5c:41:fb:06:
         c8:cf:83:6e:e7:9d:a1:b5:26:1e:04:17:2e:43:e6:f6:63:0f:
         88:3c:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:36:50 2025 by rpki-client