Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/869f6d99-41e0-368b-bd21-ea5907aa02df.roa
File:                     869f6d99-41e0-368b-bd21-ea5907aa02df.roa (raw, json)
Hash identifier:          gaRiaHsGk9GlN9f7Sw5uJ74ZhiuQspH3XId2Dq+e0I4=
Subject key identifier:   67:73:9F:B6:F8:8B:F2:BD:4B:26:B1:08:F9:0F:BA:20:47:BC:3E:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B9CC0A2BCC91A6A5BD4F89A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/869f6d99-41e0-368b-bd21-ea5907aa02df.roa
Signing time:             Thu 23 Oct 2025 02:01:56 +0000
ROA not before:           Thu 23 Oct 2025 02:01:56 +0000
ROA not after:            Wed 21 Jan 2026 03:01:56 +0000
asID:                     22394
IP address blocks:        166.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:c0:a2:bc:c9:1a:6a:5b:d4:f8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 23 02:01:56 2025 GMT
            Not After : Jan 21 03:01:56 2026 GMT
        Subject: CN=72fda53b-1d4e-4020-9875-137348c54e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:f8:02:07:fa:78:57:3b:f0:83:4c:fd:b4:
                    3f:ac:cf:90:5e:0f:55:89:6a:43:ce:d8:6a:bb:cd:
                    87:57:bd:91:f6:1c:f2:b6:8e:df:c8:70:44:18:41:
                    3d:ba:b6:c1:7e:7b:69:80:2c:45:6f:9f:f9:c7:80:
                    3b:a0:92:94:d5:a3:ec:4a:01:6f:9d:e8:74:6a:56:
                    a5:c6:68:6a:d3:f4:91:54:14:29:ba:94:59:ad:63:
                    4a:fc:83:a8:9d:66:0d:e2:73:b5:ce:47:bf:5f:81:
                    a0:f7:b8:62:c4:10:1f:9a:10:0e:e7:96:d0:91:2e:
                    3f:ff:05:cd:8c:ed:fb:bc:52:d5:7f:6e:c6:5f:47:
                    c1:3a:a6:2c:d1:38:6a:2f:a6:bf:af:c9:27:7c:00:
                    97:d7:38:29:87:12:8c:3c:36:34:d5:98:b8:a4:a7:
                    36:b2:df:35:51:d2:f4:3f:c9:2b:09:e0:ea:15:08:
                    5f:70:d6:49:2d:a7:53:f7:94:f9:30:5c:fb:ef:9c:
                    0b:a8:2a:00:3b:d0:9d:ef:cd:eb:70:a9:0e:21:93:
                    da:cb:4d:f3:80:b7:6c:fe:dd:2a:3b:58:c4:fb:b5:
                    11:40:dd:99:e5:1e:48:fd:88:46:31:fc:50:de:fa:
                    2e:ba:5f:03:b2:85:69:6e:cb:e8:0f:18:62:96:4b:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:73:9F:B6:F8:8B:F2:BD:4B:26:B1:08:F9:0F:BA:20:47:BC:3E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/869f6d99-41e0-368b-bd21-ea5907aa02df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.164.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:0f:53:67:e2:16:16:73:30:62:52:ec:c3:ae:af:c7:2a:
         8c:ab:d3:9c:2c:c1:29:05:86:8b:55:d1:58:67:cb:8e:fd:62:
         59:46:4a:fa:5f:a3:80:e9:33:c3:0a:1e:1b:65:dc:54:bb:48:
         79:03:cf:81:2d:37:00:56:7a:71:5b:0a:db:15:ac:76:09:7a:
         d1:77:86:fe:ca:1a:a5:33:85:dc:54:74:54:09:82:25:0b:9a:
         c0:fb:40:38:0d:db:fc:83:3b:15:74:69:61:73:e5:39:22:a4:
         9e:7c:f7:bc:58:7f:ce:bd:1c:94:18:b8:62:cd:c3:35:d4:00:
         a3:da:ee:69:9e:32:4c:e0:d8:91:40:da:09:56:b0:7e:3c:1c:
         a4:5e:9d:2d:c9:6e:1c:f7:c3:b5:5f:e1:f0:d0:3b:9e:28:65:
         db:5d:ea:ae:70:71:1f:e9:0d:3e:73:0b:b7:76:b9:9f:ee:28:
         be:51:ed:2f:f6:44:e6:71:fb:ac:43:f4:ce:a7:8e:9f:9a:17:
         c1:40:d5:39:f6:29:17:2d:25:23:21:89:17:cd:e3:e0:84:1b:
         5b:0b:7e:51:38:3e:e1:5c:24:b7:e1:4c:a9:19:52:05:9f:7f:
         79:f0:0b:84:75:81:c5:d0:8c:68:98:b4:74:42:76:29:10:25:
         a6:90:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:21:51 2025 by rpki-client