Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
File:                     8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa (raw, json)
Hash identifier:          pbxcevKMJCuaEPDbrsWboixIyvN+PwMsLQBt4/sq9GI=
Subject key identifier:   47:7A:1D:FE:E7:86:AD:BE:89:A4:BE:F8:6E:73:F8:BF:E5:0C:DE:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584BAA97A905C6E0AE78998A0DE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     398885
IP address blocks:        66.160.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a9:05:c6:e0:ae:78:99:8a:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=a9746ce2-dc4d-4c8a-8b6f-61f675bdfaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:72:bf:92:1b:6a:a1:51:bb:84:6b:71:cc:
                    b8:1c:b2:2b:ed:be:c8:3d:a0:08:60:03:d1:f7:3a:
                    27:6f:f4:06:2e:ae:13:d7:21:3b:d9:c1:bc:42:c5:
                    94:c4:51:4c:7a:4a:ec:18:8f:b4:02:ee:01:5d:ea:
                    8b:ef:2d:54:3c:53:7e:ab:d2:6a:15:3a:d7:b8:45:
                    69:9d:5c:5f:0e:e2:5a:13:af:b6:09:c4:d8:0c:be:
                    1b:6a:61:72:72:c8:ff:b7:80:62:cb:7c:5b:82:59:
                    67:10:83:93:b3:ef:18:17:dd:b4:a7:84:c2:c5:da:
                    e9:10:60:d6:75:d3:b3:e2:65:22:87:9f:bb:22:d8:
                    78:8d:ef:20:0f:e5:16:a4:36:72:13:b8:0a:6e:79:
                    7f:bb:5b:37:fc:87:b5:9b:ca:ed:d3:3b:39:b0:de:
                    87:da:3b:c2:e6:81:17:b5:8d:f0:1c:cc:fd:2a:5c:
                    96:85:4f:21:e3:8a:7c:6c:e3:2e:3f:fb:6c:6b:5a:
                    1c:bc:d0:64:0e:b3:af:2d:15:e6:c1:c0:fe:5a:f1:
                    17:6d:fb:ae:af:0a:f3:07:ba:a6:62:d2:bc:14:8f:
                    de:6c:6d:5a:17:78:bc:78:f0:8f:6c:7b:bc:5b:90:
                    75:e4:04:6b:40:e3:f6:23:61:c5:35:9e:8a:8f:d1:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7A:1D:FE:E7:86:AD:BE:89:A4:BE:F8:6E:73:F8:BF:E5:0C:DE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b794a88-29d1-3a9b-b2b7-ba20c3f095ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:02:c5:88:9c:be:f4:35:1a:a2:1c:5b:06:57:c7:3a:3a:c8:
         f0:08:0f:d0:88:d1:b7:d3:63:61:cd:5e:e9:58:5d:a1:75:42:
         be:8d:fd:d4:33:bc:dd:4c:fa:cf:7d:bc:2c:a6:31:20:8a:92:
         08:40:c7:c3:dd:46:0e:0b:c0:ad:37:d0:7d:b5:82:95:51:47:
         6e:07:e7:e5:7e:05:c0:60:c1:61:71:46:f6:c8:16:3f:7d:12:
         ef:62:9e:77:cc:e4:c3:0e:85:02:38:c2:ac:45:8b:de:b8:f1:
         91:42:67:da:50:32:2f:ed:8c:bf:17:1e:e8:83:d9:a7:4e:4e:
         70:60:01:52:b2:54:67:ce:c0:66:6c:ba:f3:82:70:99:b7:e7:
         f0:f2:a2:98:2d:81:71:85:c6:34:fd:24:14:33:85:94:70:b5:
         bb:ee:53:c9:31:e3:d4:67:0b:1a:5c:5f:2b:82:24:3e:5e:37:
         87:2b:d4:59:39:9a:4f:c5:3d:3f:51:34:cf:14:b8:7e:76:9d:
         4d:01:36:84:a7:f6:30:71:93:57:6e:23:7a:ad:d5:d0:1e:64:
         f7:97:c1:37:13:40:e1:54:5f:5c:3f:9b:7b:af:fe:a6:fb:92:
         dd:3c:f2:72:a9:00:d1:e6:7c:83:f3:6c:d1:59:2f:f4:66:c7:
         00:cc:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:51:28 2025 by rpki-client