Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40ced97e-2271-31a2-b416-afcadfb52e1f.roa
File:                     40ced97e-2271-31a2-b416-afcadfb52e1f.roa (raw, json)
Hash identifier:          lL+E+NZ1SlgdjaaN+VxJZleSdgFdGJvVEXjRbTLaT1E=
Subject key identifier:   D2:D6:8A:68:BF:47:E6:71:80:64:7D:9A:A4:C5:E4:FE:4A:CC:18:4B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971118F361719C39C4968F
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40ced97e-2271-31a2-b416-afcadfb52e1f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        174.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:11:18:f3:61:71:9c:39:c4:96:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=81f08df1-96e8-41af-bc6e-f83412d00571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:62:ab:e3:66:24:a0:e4:84:78:1b:bb:e3:
                    a3:91:1e:39:a8:b3:89:37:2a:a3:44:90:9f:94:f8:
                    b9:3d:ec:d2:d5:af:66:8e:72:39:99:5c:af:75:7f:
                    4d:0f:dc:25:0c:f2:75:cb:db:af:eb:c0:b9:5e:7c:
                    30:0f:13:6d:b9:51:34:2e:18:65:4f:79:84:30:a8:
                    92:85:2a:0e:a8:b3:6c:35:3f:ad:09:1f:fa:16:c5:
                    6c:1c:8f:11:77:de:df:4e:d5:0c:34:c2:dd:b8:c7:
                    0a:d3:ae:06:06:1c:4c:48:c2:4a:29:bd:eb:d3:a8:
                    57:58:6b:6b:f8:80:92:35:6d:42:5c:b3:5d:d3:f2:
                    48:81:f6:fc:3a:55:bf:fb:1a:f7:15:2d:12:a9:66:
                    7e:72:04:ff:43:b2:56:82:6c:35:75:7a:f2:e6:b8:
                    eb:ea:d6:01:8f:5b:4f:bd:b1:98:81:33:af:03:ae:
                    91:d0:2e:f3:78:73:8e:cf:3d:6c:a4:0b:82:81:f7:
                    8c:cb:3e:e7:f3:34:50:3d:1a:91:a7:0d:8e:06:f2:
                    7c:ba:2f:b9:1e:78:ba:26:21:12:59:f5:98:d8:44:
                    f9:d4:e8:eb:e3:d6:f3:1b:94:40:91:a7:9a:c9:98:
                    79:35:9e:bc:78:26:65:e6:a8:93:84:35:62:fe:ec:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:8A:68:BF:47:E6:71:80:64:7D:9A:A4:C5:E4:FE:4A:CC:18:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40ced97e-2271-31a2-b416-afcadfb52e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:21:27:c1:cd:5e:73:21:5c:6b:19:48:4d:78:fb:99:15:62:
         50:e8:f4:a3:e9:f9:c5:90:ed:2e:5e:25:65:6a:9c:b3:f3:80:
         4f:1b:76:99:7c:eb:23:ce:8d:47:2c:75:a8:4b:8a:fc:b0:13:
         63:cc:27:ea:3c:7a:fe:32:08:ad:ff:3c:fc:5a:e2:47:93:4e:
         94:fe:e6:fc:ad:9d:71:2d:e5:f6:4f:79:b4:63:e0:18:70:d2:
         4f:6e:10:c0:c6:1d:41:2e:57:f1:94:3d:c7:d4:28:dd:05:09:
         d7:2a:ef:a7:5e:68:56:4e:df:03:8b:2e:21:8f:7a:9e:de:3a:
         7f:20:7b:bc:9d:42:df:98:13:ff:29:38:79:06:ff:d1:f9:80:
         ec:0c:be:c3:45:3a:a6:38:ac:ea:cc:8e:3c:27:81:52:f6:da:
         8c:df:66:2d:05:dc:ad:b4:ec:27:bd:18:04:58:41:b3:cc:ae:
         0d:51:33:b7:01:b7:30:59:60:09:3e:e5:3b:49:54:27:a6:51:
         c0:81:9d:55:97:27:a0:e4:b1:07:88:be:da:cf:3b:3a:f4:e6:
         59:af:5e:c4:89:05:01:03:54:e5:58:c3:98:5a:6a:a7:05:a2:
         a0:40:9b:50:23:ea:7f:71:b1:b0:f9:8c:26:f9:9d:17:f8:5f:
         c8:ff:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:19 2025 by rpki-client