Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa
File:                     955a39a7-f863-3b2f-a974-ed555c45c350.roa (raw, json)
Hash identifier:          3NuH+i+FQGXE1tjWIaHdy1rkpQdqD5oxFbIKOPiOzJ4=
Subject key identifier:   DA:2B:ED:C6:94:2F:FC:DC:8F:D0:B2:47:87:1D:0A:29:C4:58:E8:E8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1968326D6F25674F9824400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        72.28.80.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:83:26:d6:f2:56:74:f9:82:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1353f0fd-f1ef-4d02-9e2a-294725d2e103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:ef:ec:ee:75:91:1a:fb:e6:4c:1a:bf:ec:
                    b9:b4:61:25:a4:e1:98:02:f0:05:c9:a2:f6:a8:50:
                    72:c5:9b:aa:04:9c:79:c9:b6:95:ff:5d:cd:e3:58:
                    80:90:94:bf:6b:50:03:c1:09:9d:c9:f5:7c:3d:95:
                    1c:18:ae:95:5a:19:9a:c4:e1:94:db:35:35:c0:38:
                    36:2b:9d:f6:9d:c0:ba:3c:fe:e4:7f:ff:0d:84:ce:
                    16:60:dc:a2:4b:74:3e:48:f9:54:e9:64:de:1b:4a:
                    75:60:85:7b:a8:fa:11:9f:6b:39:fb:0a:ca:77:ba:
                    05:1b:c5:2f:6c:85:d7:3d:09:01:c5:60:6d:09:ae:
                    c9:00:dc:77:76:0d:f3:01:59:69:71:49:83:76:b4:
                    13:49:6d:1e:a5:6a:6a:05:4b:d2:50:67:ac:82:63:
                    74:60:cd:0b:43:65:80:14:8b:af:7c:b6:94:56:e7:
                    6b:10:df:ed:ff:0d:76:6d:77:9e:a9:ec:67:59:fb:
                    e7:a6:4d:19:8b:35:6d:d5:04:f3:d7:bc:31:07:7d:
                    7c:cd:8c:ea:90:19:72:c2:30:3c:7a:7c:62:5a:5a:
                    02:b9:35:b9:ad:77:02:4e:1a:f9:7c:09:7b:21:7c:
                    f5:22:02:46:d5:56:97:33:f7:40:e8:31:d8:9b:94:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2B:ED:C6:94:2F:FC:DC:8F:D0:B2:47:87:1D:0A:29:C4:58:E8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:32:96:cb:8e:ee:73:7d:d5:d2:12:fd:35:61:ff:dd:1d:
         72:2f:9f:7b:64:fd:21:f3:e1:d9:e8:1e:d9:5f:aa:f0:9c:c6:
         f9:87:0b:1b:eb:42:93:9b:df:c5:57:d6:cf:b0:da:5d:7b:42:
         33:70:76:3a:98:73:80:cd:f5:5c:9c:03:21:1a:25:0b:31:70:
         60:95:64:6c:d9:c2:79:92:61:76:03:86:ff:95:80:93:c3:5a:
         51:6d:84:01:d4:ad:f0:48:c9:1e:1d:31:b7:df:3c:0c:66:05:
         85:b2:eb:99:13:27:8c:e5:ca:8e:c5:26:ec:26:8e:2e:73:7b:
         47:f2:f4:a0:3f:f3:52:16:c0:02:79:ee:49:5a:c4:22:55:47:
         d6:be:b0:5c:c0:06:8d:0a:6c:ea:61:74:e2:92:b5:61:bb:7d:
         b5:bc:b9:a1:15:b3:26:79:17:dc:69:b1:e8:ea:0c:56:b1:6e:
         78:5c:f8:5a:08:97:ce:d0:fc:17:93:57:c9:09:24:b4:9a:e1:
         80:4b:1a:d3:35:0b:51:79:48:5a:ac:ae:5b:ef:6b:63:70:6a:
         78:81:db:7c:f2:6e:68:66:f3:02:a3:c7:18:07:63:13:7b:97:
         77:8e:ad:6b:28:cc:bb:e9:ae:ce:7f:1e:6c:b7:03:54:aa:16:
         0c:2b:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:20 2025 by rpki-client