Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa
File:                     581d2215-b7ba-34d5-ab39-b96228a02055.roa (raw, json)
Hash identifier:          WPdUgeiEXTKK+okqZLeYuLRMRBnT+9bSYLxQ8xNYVXI=
Subject key identifier:   B6:A4:55:BA:2B:B2:E7:C9:D3:E7:6C:96:C0:1D:81:A8:24:62:2F:0D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B62B79C5B8B546EF049E7BE40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa
Signing time:             Thu 02 Oct 2025 07:06:52 +0000
ROA not before:           Thu 02 Oct 2025 07:06:52 +0000
ROA not after:            Wed 31 Dec 2025 08:06:52 +0000
asID:                     398781
IP address blocks:        66.95.0.0/17 maxlen: 24
                          68.165.0.0/18 maxlen: 24
                          68.166.0.0/17 maxlen: 24
                          68.166.192.0/18 maxlen: 24
                          69.3.0.0/17 maxlen: 24
                          216.175.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:b7:9c:5b:8b:54:6e:f0:49:e7:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 07:06:52 2025 GMT
            Not After : Dec 31 08:06:52 2025 GMT
        Subject: CN=d978b41b-b780-4a56-acb1-91f1873d77e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:30:bb:5f:15:68:db:a4:09:58:fb:f9:36:
                    b6:c4:46:8c:9d:ff:06:77:32:12:78:9b:e3:b5:c8:
                    64:53:cd:b9:8b:3a:97:eb:36:a7:3a:02:6e:f8:cc:
                    ce:96:55:07:f2:59:f8:b5:ef:3b:1e:0e:1d:ac:6d:
                    7e:fb:7b:29:93:0f:19:fd:74:15:18:03:8d:3b:ec:
                    b8:de:f4:c0:ea:db:15:c0:27:91:54:71:0a:09:72:
                    de:44:47:79:7c:9b:41:86:13:53:cc:37:6b:f1:b8:
                    34:cd:28:93:1c:6c:14:43:99:9d:4a:03:54:30:36:
                    bb:f7:8c:63:f3:1f:73:09:d9:3b:44:c5:d1:5b:72:
                    63:47:91:ca:3d:25:47:93:ee:c7:2f:c8:37:ec:86:
                    6a:a5:1a:46:72:00:bd:79:b4:e7:f9:10:ce:7a:8b:
                    30:c0:7e:66:ce:fa:97:08:c7:0c:c3:e7:dc:c6:a1:
                    23:68:42:cb:82:98:c1:40:78:42:19:52:70:ee:74:
                    c6:f6:0f:56:82:8d:47:19:b0:3d:7d:a2:d8:5d:da:
                    a8:72:38:70:95:1a:a1:d7:74:12:b0:79:19:bb:8f:
                    76:7e:ac:e9:de:81:f2:31:dc:be:3c:d4:a2:b2:46:
                    8e:88:42:d8:d4:c9:69:38:db:b6:47:46:50:62:02:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A4:55:BA:2B:B2:E7:C9:D3:E7:6C:96:C0:1D:81:A8:24:62:2F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/581d2215-b7ba-34d5-ab39-b96228a02055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.95.0.0/17
                  68.165.0.0/18
                  68.166.0.0/17
                  68.166.192.0/18
                  69.3.0.0/17
                  216.175.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:09:ea:8c:ca:d3:44:6a:66:c6:79:15:c5:fd:aa:89:69:
         5a:b9:a2:82:c3:47:ff:6f:35:01:a6:c2:38:90:e3:70:7d:fb:
         95:ea:21:79:a5:0c:7a:2d:2d:d4:36:22:f0:dd:1d:a6:84:b6:
         b3:62:97:ed:81:91:a6:41:cd:9f:d2:c6:d1:96:cb:ed:0b:07:
         3e:8b:c5:23:b6:19:58:3a:d1:a9:d0:af:04:a5:dc:66:01:2a:
         07:20:cc:6b:10:19:e2:e4:7e:f5:dc:19:95:63:80:cb:9c:f8:
         1d:65:bf:8a:de:21:80:1a:91:9b:a4:9f:46:15:c9:11:46:ee:
         d0:dc:3d:4e:b2:2c:b3:ee:ca:da:25:29:0c:a6:16:cf:e2:da:
         9f:43:98:31:a5:61:99:80:f8:de:a6:53:02:9b:c5:49:86:d2:
         1a:6e:ef:6f:06:c2:20:50:c5:96:a6:64:dd:2e:1f:23:3d:58:
         fd:69:e9:21:73:22:da:58:60:fa:1a:bd:4a:57:e3:17:40:02:
         d2:9e:b8:bc:bd:66:76:fb:fb:54:f3:13:b0:f5:40:fd:81:46:
         0f:42:c6:98:bf:e6:4b:af:be:ea:5a:d4:70:66:1d:b1:18:bf:
         eb:2a:88:45:c3:60:33:22:f8:fb:f3:b6:34:07:a2:59:ac:8a:
         06:0d:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:56 2025 by rpki-client