Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
File:                     9ff35021-1a5a-37a7-8f79-b9c773e21707.roa (raw, json)
Hash identifier:          lEoI6xMQdX5/kau3CQ+Do+xICzu4yggzt22gR09X+Ls=
Subject key identifier:   81:E8:D4:8C:23:40:D4:1A:D7:B5:11:A7:5E:8B:AB:B2:9F:24:CF:74
Certificate issuer:       /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial:       010D0C9F4328584B5F37236B519C998A2E0C5D00
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     12161
IP address blocks:        199.74.222.0/24 maxlen: 24
                          199.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:23:6b:51:9c:99:8a:2e:0c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=98a1d22f-31ce-4a5e-be2f-ca48c7ee9335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:5c:95:3a:3b:ae:85:48:43:14:e6:dd:44:
                    04:3b:04:9b:a2:21:3d:06:98:71:50:a5:94:ab:6f:
                    d9:51:f8:bb:66:ef:81:09:36:8a:2c:82:3d:23:53:
                    fb:d8:f3:34:1c:0b:bb:79:ad:b1:88:fc:1d:d7:8d:
                    c7:5b:82:0d:2d:0c:59:ad:69:53:ea:a2:83:9e:f9:
                    2b:3d:ec:13:5f:ae:6b:f3:d1:26:84:d0:b6:21:c7:
                    39:db:ba:fc:a7:38:06:94:28:57:94:e4:fe:1f:f1:
                    9e:fd:0c:f5:46:3d:fc:b6:b4:bd:2d:48:2e:97:72:
                    c2:e4:c7:06:ae:68:8a:ab:07:fb:b9:b4:66:89:b2:
                    bf:61:88:4b:b9:26:3a:2c:23:0b:bb:66:7f:ad:18:
                    56:f8:95:ee:25:f5:5e:c7:11:e5:d5:f3:0e:78:7a:
                    e8:c6:0d:9f:5a:8c:c8:aa:6b:1b:f4:f5:6b:b4:81:
                    ed:ce:f7:15:0c:a3:e9:b4:99:a4:50:ef:81:bc:44:
                    b4:22:0e:66:cf:9a:48:2d:4b:2b:ae:e0:8b:1a:ef:
                    a2:51:b0:1b:ef:dd:2f:75:57:78:8d:ee:3c:f5:80:
                    3c:fb:9c:36:19:7c:ed:8f:71:62:fc:1b:9d:f6:61:
                    c0:c5:45:67:a8:a6:74:1c:15:cc:7e:73:da:7d:f8:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:D4:8C:23:40:D4:1A:D7:B5:11:A7:5E:8B:AB:B2:9F:24:CF:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl

            X509v3 Authority Key Identifier:
                keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.222.0/24
                  199.74.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:be:44:25:c1:6b:82:90:3e:bf:b7:1d:a4:de:72:12:84:2e:
         2c:54:09:03:7c:1c:be:7c:53:46:88:09:bc:54:5e:72:cf:c5:
         a4:f0:bd:70:72:ea:02:aa:d2:b0:94:d0:1e:d8:cf:d4:4d:36:
         83:44:49:ea:02:02:e6:3d:09:16:d4:68:0c:10:75:18:85:be:
         a9:14:e3:ed:f6:0f:f6:3d:63:ec:0e:f4:c9:64:bd:cd:88:94:
         e3:a7:ea:c5:a8:4e:9d:6a:a2:bf:95:81:fc:40:5d:75:06:6e:
         0c:d5:47:3b:66:6e:96:5a:28:75:98:c3:a2:6a:70:18:8b:e1:
         ac:24:3b:96:58:ab:8b:be:57:c2:1a:ac:a4:88:f6:ce:58:f7:
         1b:4a:15:98:3c:85:8f:bf:c2:a9:2f:b2:cc:51:75:4f:38:54:
         5c:8a:a8:5e:7b:d2:a0:32:cc:19:8f:cc:3b:de:e8:b5:38:25:
         69:14:03:db:1c:08:bf:10:50:76:41:4f:fe:63:fa:41:76:bd:
         fe:7c:14:e7:a2:f9:59:ab:5e:2a:b6:2d:9d:68:01:4e:63:e9:
         e5:71:02:9f:af:3c:7e:08:f9:64:53:36:ba:6d:d2:7d:0e:09:
         1b:26:ba:24:44:bd:f1:59:e4:7c:a3:b0:8c:e7:68:30:3b:84:
         d6:d4:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 23:43:50 2025 by rpki-client