Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa
File:                     a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa (raw, json)
Hash identifier:          RWAqAdm3WjmccmLFjPTaIow6CQi9AEG89rWRl9nX4zg=
Subject key identifier:   DE:9C:F3:1E:E9:75:9F:3F:BD:EC:F9:B9:95:69:71:C8:78:0A:C1:C0
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584A8146434A9A31EAD7314DEE44
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     11272
IP address blocks:        76.8.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:43:4a:9a:31:ea:d7:31:4d:ee:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=02893b55-e4aa-4f35-be9d-7d878f71f066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:e2:ce:b7:22:f8:6f:cb:36:68:56:cf:ac:
                    8b:0b:bd:1a:9f:47:54:f5:de:28:7d:f3:7f:74:99:
                    52:4b:be:5a:3f:8b:8f:34:ef:a9:19:5b:70:bd:d8:
                    08:22:25:1a:b5:4c:ae:e2:61:a9:4f:58:b1:a1:d1:
                    40:86:eb:1c:c3:92:36:0b:9c:7c:5f:ae:1d:f7:98:
                    4c:95:63:6b:12:48:8c:08:33:c4:02:c9:d7:4a:c3:
                    34:af:15:03:ce:54:9e:e9:cf:6d:08:6b:02:22:b7:
                    97:ea:d3:f4:20:bf:14:a2:65:af:8b:76:fc:68:2a:
                    26:b5:8a:66:c0:57:05:03:a5:b1:9b:49:07:fa:0e:
                    a1:da:cf:1a:b7:84:79:30:ae:78:e8:21:e7:0b:e8:
                    21:47:a1:65:ce:f7:58:15:ec:04:54:c1:14:32:ba:
                    2a:da:f8:6d:bc:9a:b7:5e:2e:17:70:0c:43:82:ba:
                    d9:c8:1d:97:42:4b:f7:a4:f3:a1:24:3d:28:78:e7:
                    ff:ed:a1:8f:19:b6:0e:f5:e5:fe:7c:f5:96:9f:02:
                    67:2a:b9:b9:0f:08:81:e3:d2:3d:a8:db:82:0b:18:
                    b5:7a:71:ea:43:4f:46:b3:75:02:27:40:10:8d:33:
                    dd:47:02:a1:e5:43:ce:e5:4d:d7:9b:e7:97:61:da:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:F3:1E:E9:75:9F:3F:BD:EC:F9:B9:95:69:71:C8:78:0A:C1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/a0e9968f-fa88-3f14-a7f0-42589b750f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:e1:1c:e6:da:08:97:c7:62:39:03:0b:43:2f:90:a7:f4:
         a0:7b:dc:ee:2a:f5:66:20:13:ab:89:f1:7f:db:b5:23:ed:65:
         4d:49:11:b8:9c:76:e2:6b:6c:c3:b7:06:91:e6:bf:1a:d5:6f:
         8d:aa:56:5e:13:f0:cb:0a:04:d6:f6:ef:bb:af:31:33:dd:45:
         8e:31:b8:87:59:44:01:e3:1e:6c:99:68:78:56:fd:bf:4c:ad:
         d5:a5:41:14:77:0a:d0:80:c8:cc:ec:b6:69:0c:ff:03:88:31:
         fe:f7:5b:5d:98:26:61:04:75:85:67:ba:41:89:22:9b:19:21:
         db:51:6d:b3:d0:2f:15:a2:9f:74:00:a9:a3:ee:6b:19:9d:61:
         43:95:b3:ec:e3:b5:6a:5b:ce:86:b8:de:65:ef:3c:f7:46:4e:
         29:b9:56:5c:21:d4:6b:76:71:bf:74:7e:43:43:90:90:ca:2b:
         2e:be:dd:91:1d:ca:f8:2c:ae:a5:00:13:31:93:bf:d8:eb:24:
         3e:bb:cb:73:5a:bc:18:08:6e:7d:db:20:f7:50:83:98:da:9b:
         af:a2:48:c7:ad:e0:4c:12:02:98:61:fd:89:84:16:2a:ce:71:
         08:9b:bd:eb:91:51:fc:ad:9d:d3:75:04:91:56:4b:6e:6f:8c:
         e9:e4:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:37:24 2025 by rpki-client