Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa
File:                     b0702562-ed4b-3a7c-af04-0f850e893016.roa (raw, json)
Hash identifier:          M20nRhBnzgk7e1AwpUzgfuct6t7gllN4joJo4LT8zl4=
Subject key identifier:   C2:5D:15:66:03:82:94:6D:A8:2B:57:3D:DE:FF:09:84:6E:BB:19:F4
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584BBB7595075A74A9ACED58F600
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     7106
IP address blocks:        66.209.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:95:07:5a:74:a9:ac:ed:58:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=c0c560d1-56f1-4baf-b980-48b5dde903ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:51:04:ed:42:f6:37:8f:71:fd:b5:1f:da:
                    82:ed:2f:f7:85:45:40:d1:75:73:53:25:b9:f0:53:
                    9a:d4:40:67:b8:e2:da:fa:66:32:29:ce:d9:0a:40:
                    14:7c:8d:1f:0e:a4:96:9f:b4:95:43:e0:58:bd:20:
                    9f:f2:34:ae:17:da:13:26:f6:17:20:e9:37:4f:4f:
                    78:cd:82:e6:6c:aa:81:6b:70:82:04:f8:a2:29:25:
                    9f:f7:35:7b:ec:9a:32:ce:2f:f9:ff:99:43:21:d4:
                    af:33:93:82:be:6e:af:1f:e1:e6:00:7f:8c:53:80:
                    45:5a:e1:fa:a2:cc:b0:f3:b5:ea:bc:5f:83:88:97:
                    d4:9a:54:a1:79:46:cf:ed:08:39:d5:31:fd:01:64:
                    d9:dc:67:05:90:12:cf:09:ab:2e:59:72:f0:7a:da:
                    62:7d:f2:6a:d2:39:5f:91:c7:78:27:5f:5b:9c:b8:
                    f3:85:fe:48:c4:c0:3d:4f:68:f7:15:25:7b:75:76:
                    ee:7f:a2:68:98:65:43:33:53:78:9d:18:84:7e:19:
                    23:9a:62:c0:9e:f6:80:97:7d:cc:56:3a:dc:8f:f8:
                    bc:70:1b:55:06:ba:4a:5a:6a:f6:90:db:e5:12:2a:
                    59:28:09:6b:7e:ae:b3:2f:28:d4:71:3a:45:0e:69:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5D:15:66:03:82:94:6D:A8:2B:57:3D:DE:FF:09:84:6E:BB:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/b0702562-ed4b-3a7c-af04-0f850e893016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2a:a7:ea:68:f3:33:91:80:22:2a:59:38:6f:3f:10:92:a4:
         cb:cf:84:96:00:83:be:a8:46:97:20:c7:d5:b5:ba:25:2f:6c:
         60:00:e9:ce:61:01:f2:91:66:2a:70:74:49:af:17:2a:f9:c9:
         be:67:91:57:61:20:3d:81:22:9c:16:0a:80:a8:b5:ec:0f:e8:
         47:79:a4:a6:57:30:34:df:b4:f8:92:bb:c9:0a:c7:85:59:4c:
         9f:a5:ca:d4:01:59:85:3f:17:e9:2c:db:75:a3:c9:db:e8:3b:
         8f:77:89:52:93:f0:6e:2f:8b:f9:2d:3b:2e:a7:72:63:e2:be:
         9b:4c:57:12:56:b3:d5:f1:61:96:ff:dd:0c:59:b5:96:25:01:
         37:e5:65:a7:81:dd:d1:fa:b4:96:59:8e:98:b5:c5:c8:16:5f:
         40:d1:dd:22:5e:ac:c9:9f:fa:b9:d2:34:d1:18:b3:68:b8:03:
         55:b0:7a:3a:09:a0:f6:8b:26:a4:af:13:b8:55:c2:2f:28:47:
         e1:8d:a7:11:06:63:60:93:c0:c0:4c:86:ad:eb:b5:c3:7d:a0:
         a4:e4:95:b7:a5:4d:16:30:ee:be:c6:ca:66:0a:a0:13:01:c4:
         9d:85:98:27:2d:16:fa:61:65:b7:52:8b:ea:a7:1d:f0:7a:21:
         3e:b2:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:43:21 2025 by rpki-client