Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63481845-7eaa-3c0d-b6c8-ff470701a563.roa
File:                     63481845-7eaa-3c0d-b6c8-ff470701a563.roa (raw, json)
Hash identifier:          Gha1VITGxiolem1dz3viQQA0ADpv0wb4p4Y4bydKRIo=
Subject key identifier:   4C:9E:A0:91:7E:EE:59:9C:AE:B6:6C:B1:E1:7F:82:0F:32:55:46:2C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B709A8967492891C68546FF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63481845-7eaa-3c0d-b6c8-ff470701a563.roa
Signing time:             Tue 07 Oct 2025 06:29:36 +0000
ROA not before:           Tue 07 Oct 2025 06:29:36 +0000
ROA not after:            Mon 05 Jan 2026 07:29:36 +0000
asID:                     16276
IP address blocks:        68.167.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:9a:89:67:49:28:91:c6:85:46:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 06:29:36 2025 GMT
            Not After : Jan  5 07:29:36 2026 GMT
        Subject: CN=4cd3bbac-bcf9-4e8b-a7eb-b153a534afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:83:ed:bb:0a:98:46:94:d8:60:e1:dc:22:f4:
                    fb:3f:28:15:c7:75:a5:e7:db:74:eb:77:1f:5b:5f:
                    42:0f:6c:63:9a:93:98:c9:19:9e:37:c6:6a:4a:7e:
                    c2:31:2d:80:1a:b9:6e:c2:62:cf:bf:5e:4d:98:57:
                    f8:8f:67:42:96:ed:18:10:25:6e:1b:f6:cd:43:34:
                    42:09:d5:75:ee:36:4a:08:a4:50:43:2d:42:83:7b:
                    9a:83:e2:25:49:64:f8:de:c5:73:8e:20:fa:bb:df:
                    6a:d5:a8:b2:1b:b2:71:80:3e:1c:90:06:50:f7:d0:
                    07:6a:5a:83:31:a2:2c:c1:66:32:14:4d:a5:8d:76:
                    9b:e1:06:34:64:49:49:2a:61:5e:b5:46:b2:38:ef:
                    9d:18:35:4e:b6:64:ff:31:a6:c4:e1:70:74:a1:01:
                    26:c3:f0:53:16:d8:66:74:32:6c:ae:28:fd:26:47:
                    ab:c6:d7:0c:c6:3f:5b:19:17:8a:68:48:94:49:ba:
                    af:3d:64:e5:af:73:2a:70:2c:e0:ee:48:37:44:1b:
                    ef:ed:8d:2d:4a:4b:42:8a:59:07:83:80:bf:e4:47:
                    86:16:03:dc:13:7b:8b:d2:c6:e3:5a:e5:91:41:a4:
                    93:0a:11:41:8f:73:75:ae:b6:58:40:0c:f3:68:a4:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:A0:91:7E:EE:59:9C:AE:B6:6C:B1:E1:7F:82:0F:32:55:46:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63481845-7eaa-3c0d-b6c8-ff470701a563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:24:1b:cc:8d:62:36:c1:4c:8f:b7:44:4b:ba:8c:28:9e:
         2e:7c:00:bf:41:95:c3:80:8f:2e:a5:0e:19:06:3c:1b:cf:67:
         b3:c2:89:bf:e2:b1:f5:f7:40:fd:0f:a6:38:4a:a7:66:d9:3e:
         ac:5e:80:d4:ad:c8:7f:a2:88:df:f1:a9:d0:07:e1:06:e4:cc:
         b8:79:41:3b:f8:9e:65:9b:88:e2:cc:09:58:8b:1d:c9:47:cd:
         54:13:19:4b:f0:a9:58:c0:bb:7a:9e:97:ec:31:a5:3a:d0:71:
         6c:ca:f3:3b:b9:66:b9:5d:c1:c8:79:92:d5:4c:91:d4:c4:44:
         91:14:10:b1:9c:5c:13:19:b5:26:4f:01:24:7e:c6:62:53:65:
         3d:5b:c2:ad:52:8b:c6:26:d7:3b:77:56:87:28:ab:82:8b:32:
         65:3c:30:2a:4c:ee:c7:62:6a:e1:51:b0:31:a5:09:ca:34:f6:
         b9:37:00:c2:30:59:a5:e9:cf:06:ae:09:6b:47:f9:a4:ee:e9:
         7b:88:58:1a:79:be:d7:7e:3f:1f:95:87:6e:b7:77:70:33:c1:
         f2:31:e8:2f:36:93:51:ae:3d:b5:1c:6b:9b:58:2e:6d:90:28:
         1d:5c:0b:b5:a7:2e:f6:44:bb:98:57:15:81:e3:47:18:b7:8a:
         cc:44:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:53 2025 by rpki-client