Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa
File:                     cd0c675e-d5a4-3880-94ad-b6166913174b.roa (raw, json)
Hash identifier:          sayHslXV4eWJeImo+XuVBIo7kpnDlSlbnU3AviB/6lk=
Subject key identifier:   6B:93:D7:E2:1E:4E:5F:47:3C:0D:23:5E:50:26:8C:FB:86:6A:02:1F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B67974FE2798284B857BAB600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        74.125.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:4f:e2:79:82:84:b8:57:ba:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=4878d3c1-f2bc-485b-a91d-18a5024b277d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:47:2c:cd:2c:7f:5d:45:e5:f8:15:2b:b9:
                    8e:96:26:2a:c0:ce:86:98:11:bc:38:9e:57:5e:d2:
                    2d:9b:50:2c:5e:42:05:62:26:90:dc:61:33:05:7e:
                    10:d2:d4:30:9f:be:05:29:16:29:8c:ce:84:12:72:
                    33:95:49:68:2d:82:aa:73:1b:34:4e:62:5c:3d:79:
                    ec:3f:fa:d6:26:af:9b:fd:47:6a:f4:c3:52:b9:64:
                    dd:9f:66:20:5d:93:b8:03:3b:8c:33:3b:2d:71:61:
                    2a:ca:93:24:e0:7c:87:91:08:9b:20:9d:aa:34:2a:
                    c7:4d:32:18:78:a8:2d:1a:cc:cf:fe:20:ae:76:d9:
                    e0:c2:e9:21:ae:99:fa:0b:b8:75:e3:19:15:73:3b:
                    73:1c:ba:d6:47:e1:93:5d:0d:22:94:14:4b:71:8c:
                    14:e1:14:93:74:c0:ac:3f:58:dd:bd:70:f2:17:41:
                    3a:b6:cd:52:99:0d:8e:be:0e:e1:55:00:c8:ab:1e:
                    5b:eb:81:9a:32:55:a6:70:5a:7d:76:1f:76:5f:59:
                    13:55:e7:0e:4f:3d:f4:1f:ff:de:90:e9:3e:d5:8c:
                    56:57:4a:9a:b6:46:ad:02:37:2d:f8:5c:1b:45:26:
                    08:36:9a:b0:3b:4c:cc:1c:23:e0:c4:d4:ac:f8:2a:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:D7:E2:1E:4E:5F:47:3C:0D:23:5E:50:26:8C:FB:86:6A:02:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd0c675e-d5a4-3880-94ad-b6166913174b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:2c:86:ce:a5:1e:3d:4a:df:2d:e1:e0:09:cd:1c:69:11:
         64:7a:74:ab:af:14:21:65:af:a3:36:99:3d:c1:9d:38:c1:7c:
         a4:ee:d0:3e:94:39:bf:87:9a:37:80:6c:08:f4:70:f2:de:c9:
         78:65:05:ee:bb:07:84:7b:fa:7a:e8:8d:31:fb:a4:21:78:f0:
         b7:aa:c1:02:25:cb:06:f3:c1:88:c5:3f:ef:ec:90:57:97:0b:
         c1:14:f0:2e:44:e3:f3:e1:43:7e:39:b2:a8:ce:b3:59:c1:7f:
         12:d8:d0:51:70:d2:31:d9:21:36:22:6b:1e:4d:f0:43:85:3b:
         42:67:c7:1d:d7:d4:ca:dc:23:28:ba:78:19:a3:23:33:be:56:
         e6:bb:52:3e:c6:56:35:74:22:28:4d:9c:1a:3e:d6:7e:7d:a2:
         2e:44:e8:56:75:06:a7:fe:30:34:8e:d3:fc:64:52:98:4c:30:
         8b:c4:cb:6a:bc:a2:a6:ed:68:6a:25:eb:32:0b:61:4e:73:b1:
         25:4e:65:92:0f:dd:c5:fc:20:73:f2:fc:28:ac:ca:f1:74:cc:
         99:ab:0c:ce:a0:b3:a5:f7:2a:86:0d:0d:a3:f0:26:c6:ef:ad:
         31:14:a3:e9:6c:32:ac:2f:54:6b:ad:24:3d:9d:41:ea:72:5e:
         6d:5b:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:47:26 2025 by rpki-client