Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa
File:                     385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa (raw, json)
Hash identifier:          H/TlUpvheZ+c0GsIAcSUhbYPcQRtYIqu9prME5IwqUA=
Subject key identifier:   96:98:CC:5B:72:01:C5:FC:70:67:6C:A6:37:81:12:9C:C2:2A:EB:F9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971109C99FC608FE519440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        70.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:11:09:c9:9f:c6:08:fe:51:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d991478c-173e-42af-99b7-5658ff3ff7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:27:31:26:bc:ea:8a:b5:86:38:2d:78:b1:
                    a1:34:89:fa:d7:44:cd:ed:6f:54:d1:16:c2:28:29:
                    dc:fc:d4:48:9e:4c:70:83:4f:68:85:1d:e4:d4:e4:
                    24:a8:1c:dc:cf:7b:e4:4b:c8:d5:10:f5:d7:7c:8d:
                    96:ac:81:ad:4a:77:48:83:9c:01:d2:f9:c9:df:af:
                    7b:dc:32:ed:39:36:b9:63:75:5e:43:4e:fd:65:25:
                    e3:3e:a7:44:38:14:74:7c:5f:35:f1:a1:5a:0e:e5:
                    2d:13:66:f5:99:18:14:d6:0b:80:ed:5d:62:8e:69:
                    41:06:e1:d5:89:45:f8:c0:d3:98:8b:f3:2c:f6:55:
                    50:26:90:f2:b5:3e:54:d4:d0:ef:47:9c:a7:5c:48:
                    56:91:8f:7f:12:b2:b7:38:41:76:19:03:b8:4c:02:
                    47:be:36:53:5d:2d:e4:c6:68:84:36:dd:9f:2e:e4:
                    de:d3:53:a2:5d:cb:91:8d:63:3e:93:f3:27:53:7b:
                    30:d1:0c:4b:1e:4d:d6:fd:cd:c0:aa:33:66:75:c3:
                    fc:6d:f5:b1:24:f5:02:30:96:6d:5a:8b:e6:71:2d:
                    13:b2:01:90:78:85:d4:88:42:b7:d4:9d:99:82:78:
                    95:e5:80:5c:6c:14:0d:dd:cc:b7:2e:46:6a:8f:3d:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:98:CC:5B:72:01:C5:FC:70:67:6C:A6:37:81:12:9C:C2:2A:EB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:92:19:7d:94:5b:7e:30:ac:49:7d:21:ee:95:ad:25:6e:
         4a:5b:99:fb:28:66:f9:fe:c6:e9:d5:24:21:79:4d:9a:c6:2d:
         9c:8f:23:fd:08:b4:e8:8f:67:03:0c:7d:d3:db:f1:51:ae:a5:
         ca:73:62:d5:f0:cd:63:fe:ae:89:fe:cb:64:8d:40:28:91:7f:
         b3:6a:ec:ba:3c:97:85:1a:aa:38:9b:ba:f4:65:26:0b:43:92:
         39:33:2b:63:6f:02:13:03:e4:a5:55:ed:ab:07:b9:cf:41:fa:
         7b:89:08:8a:94:7d:eb:7e:54:61:46:8b:5f:cb:97:c0:ec:74:
         16:ad:58:26:16:50:d2:a6:eb:0c:e9:db:5d:0b:a2:b1:c3:10:
         c0:88:c6:b5:33:1a:fb:3b:7e:a8:24:55:23:a1:2a:c7:d2:d8:
         7d:c7:b2:26:e9:1e:13:56:4c:3c:ef:86:cb:0d:32:7f:fa:49:
         a8:98:ae:39:5b:13:5f:b2:b0:65:63:bb:99:e1:7d:95:0a:7f:
         f8:1e:6d:cf:a0:b2:41:9d:7f:14:a6:c7:fb:9e:13:ce:f0:cf:
         53:59:84:df:21:f2:6a:ca:32:90:76:3b:1a:d6:56:4b:bd:58:
         5f:2c:b9:56:7d:f5:fd:ef:86:4a:04:6b:b1:23:8b:86:47:cf:
         b8:16:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:19 2025 by rpki-client