Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
File:                     0d50241c-e841-3989-8c88-37d5a93ca144.roa (raw, json)
Hash identifier:          9BObm7SzLAet1KFPqL6EBA2YiugCX98vvIhLooxPpOk=
Subject key identifier:   83:73:A4:67:E9:CB:D1:96:9B:E8:98:E7:17:0B:86:C1:A8:5F:18:E0
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584B0A115ED784F59462BF731000
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     52347
IP address blocks:        162.217.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5e:d7:84:f5:94:62:bf:73:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=6ac25fc6-f954-42f9-94b8-9ef1cd0014e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:0d:01:05:d1:01:59:34:7e:88:5c:b6:bf:
                    7d:69:e4:f8:30:9e:23:fa:17:9b:bd:fc:a8:44:8b:
                    8d:90:1a:1d:42:d5:a2:5d:e1:5c:5f:9a:fc:be:d2:
                    29:b5:4c:ba:d9:85:fb:5a:da:56:49:94:76:52:4d:
                    1d:a1:cc:c7:d0:a0:03:a8:f7:ac:1f:a5:59:a1:e4:
                    44:44:4e:96:25:4e:dc:78:55:a7:d7:98:61:99:4b:
                    f9:a1:13:d8:46:51:93:14:30:a6:fb:56:1b:fd:94:
                    3a:ad:37:5c:f4:42:77:b4:d5:9f:8c:84:8a:dc:4b:
                    6e:53:e1:9a:ac:c2:20:d8:b9:f8:52:99:4e:80:6c:
                    08:85:91:9e:4f:11:e7:b5:2d:4b:09:67:8b:b8:2a:
                    9c:cd:bc:f1:bc:de:01:99:44:5b:f4:8e:75:33:53:
                    e0:62:ff:83:81:39:d2:5a:4a:c1:2a:53:fd:99:6b:
                    31:cf:55:2e:1f:51:53:60:9a:a3:0c:c8:91:3e:a1:
                    91:6a:50:77:f8:a2:f6:93:a5:e4:e4:d7:9f:85:1d:
                    fe:87:83:65:c9:1e:12:1c:f5:b4:47:de:5c:7a:7c:
                    33:d5:b2:34:ba:fb:7a:18:65:d2:da:44:fb:cc:03:
                    59:9d:1d:79:bf:a0:63:34:4e:9b:5f:fe:ad:b8:4f:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:A4:67:E9:CB:D1:96:9B:E8:98:E7:17:0B:86:C1:A8:5F:18:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:60:ba:52:1b:dc:28:d5:d0:35:db:98:a1:68:0f:e4:1f:
         f1:12:54:00:d5:99:c0:d7:a9:32:ec:75:94:7d:65:da:17:b8:
         81:fc:d1:3a:7d:f1:bf:7f:1b:00:88:46:dc:5c:3b:a9:b5:76:
         de:13:fd:40:4c:67:c8:fb:3f:26:34:b9:62:e8:e7:bf:0c:78:
         70:d2:ab:d0:ae:bf:18:ec:62:73:8e:82:f6:4e:ce:fb:90:eb:
         6f:03:89:68:37:4c:9b:00:93:97:75:46:a1:15:2d:d5:51:47:
         b2:13:76:45:7f:0f:2c:d6:96:54:24:13:24:7d:37:c1:5d:2e:
         cb:9c:27:6f:b6:a2:d0:90:e4:fd:de:ab:43:60:3f:4b:32:69:
         f0:1a:f1:1a:b8:90:ab:7b:fa:10:0d:2a:ea:d2:d6:1c:fc:ff:
         a7:96:fa:29:f8:fd:35:14:c3:a0:d5:2b:4d:6a:bf:26:9a:84:
         64:94:b0:39:f4:5f:93:44:58:d3:d3:6f:f6:4d:5b:be:35:8e:
         ae:4a:f1:6c:0b:4f:8a:18:43:cc:03:ea:06:0a:25:00:fb:87:
         38:37:89:e2:d4:85:44:ef:21:88:1a:f0:c1:4a:d5:37:86:11:
         13:36:30:7b:43:86:43:c0:ef:4c:57:ba:0f:ad:21:12:be:a6:
         ed:a9:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:36 2025 by rpki-client