Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11928c66-7ac5-335f-a948-d25075e618a4.roa
File:                     11928c66-7ac5-335f-a948-d25075e618a4.roa (raw, json)
Hash identifier:          N7mhSSXQm0CArWw9ngeyl9FLThx+TOqr0gQADDA/+M0=
Subject key identifier:   65:76:6B:C4:0F:33:A7:D9:22:BE:94:3E:42:CA:9F:7F:F6:96:59:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B9CC0A3633223575DC04A3E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11928c66-7ac5-335f-a948-d25075e618a4.roa
Signing time:             Thu 23 Oct 2025 02:01:57 +0000
ROA not before:           Thu 23 Oct 2025 02:01:57 +0000
ROA not after:            Wed 21 Jan 2026 03:01:57 +0000
asID:                     6167
IP address blocks:        166.246.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:c0:a3:63:32:23:57:5d:c0:4a:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 23 02:01:57 2025 GMT
            Not After : Jan 21 03:01:57 2026 GMT
        Subject: CN=153c2c1b-d75d-4abb-a89c-da993520bdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:7e:2b:5a:f2:ac:06:77:33:1f:f0:d2:91:
                    3f:f4:c3:4a:56:72:99:27:d9:0b:b5:b9:61:3d:84:
                    07:8f:64:04:aa:c1:93:58:35:05:13:1b:67:40:a0:
                    ad:09:4e:4c:e0:ac:c2:fa:94:ac:aa:cd:f4:08:c7:
                    f5:5d:57:42:e1:48:d8:7f:96:a5:64:fe:d2:6d:dd:
                    3a:57:f2:3f:cf:48:95:72:4d:40:bd:e9:60:1e:71:
                    8c:f6:6c:e7:01:c5:03:1b:02:2c:79:61:71:12:df:
                    7a:d3:b9:68:98:c0:50:44:41:eb:78:98:c6:87:56:
                    44:ac:2f:22:44:21:6d:81:bf:a0:22:a9:d9:80:ad:
                    87:19:b9:19:30:ad:6c:1c:b8:46:fa:c5:fd:cc:b7:
                    48:79:76:f3:45:35:12:8f:90:03:5c:c4:90:25:b0:
                    28:13:e3:9a:d9:4b:6a:1a:88:f2:98:82:11:db:fe:
                    ad:10:a6:43:ed:78:fe:32:9a:6c:87:73:a7:b2:20:
                    54:5d:a5:22:0c:6e:f6:3c:73:7e:d1:5f:aa:38:fc:
                    b3:37:42:21:eb:a9:fd:9f:3e:2e:f3:c4:5b:1b:52:
                    50:5d:9a:f4:84:8e:76:63:e3:de:6a:d0:e7:c5:30:
                    92:81:51:b5:1e:c0:3c:21:7a:85:34:11:84:e8:28:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:76:6B:C4:0F:33:A7:D9:22:BE:94:3E:42:CA:9F:7F:F6:96:59:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11928c66-7ac5-335f-a948-d25075e618a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.246.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:08:71:ed:dd:90:fb:84:04:74:4e:47:fc:61:1c:ec:51:
         c0:bd:93:47:f1:16:9d:d8:48:0c:c1:de:19:a3:45:d0:4e:b0:
         8a:83:e0:5c:74:7e:3f:98:ab:3f:f5:ff:dc:27:a7:bd:f4:12:
         8a:5a:81:a8:ec:6b:b6:53:2a:07:58:c5:0f:79:34:99:9a:73:
         c4:94:8f:0c:39:d2:cb:79:db:d6:13:a3:ef:a5:93:32:65:0e:
         31:71:88:56:cc:34:3a:48:6f:3a:a5:10:68:78:1e:28:54:15:
         29:ed:67:8e:56:cf:a9:41:18:42:33:38:02:51:cb:7c:c4:b4:
         6b:8c:58:2e:79:3f:7b:54:f5:ab:d5:88:ee:ea:85:58:9b:a5:
         77:10:98:99:63:22:de:22:5d:c0:89:fd:ba:e6:35:78:05:42:
         e0:b9:89:f3:af:75:9b:14:19:af:8b:55:70:15:49:36:ea:53:
         45:4e:26:f7:99:a1:0d:ec:de:d0:ae:fa:13:34:bd:df:ce:43:
         f8:ce:60:19:7b:61:ac:ae:19:b1:1f:70:a7:22:52:4a:88:2e:
         79:57:86:c6:b1:8f:3f:ba:01:24:d2:5c:1c:54:f0:d2:88:9b:
         34:9e:65:b2:23:d9:d9:6e:d0:79:9c:08:9b:1d:68:6e:ee:a5:
         d2:c4:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:50:10 2025 by rpki-client