Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
File:                     0ad64713-402c-3924-953d-172630874932.roa (raw, json)
Hash identifier:          ooZFM1FDuEtVR0RDQwGteps+10fr7gXT7Ar2roo+0qw=
Subject key identifier:   52:C1:8E:07:3B:09:A2:A9:0C:18:61:A6:35:35:1B:2C:BF:B4:00:AB
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584B328C343D98F6CEA569735D80
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     15267
IP address blocks:        72.18.112.0/22 maxlen: 22
                          72.18.112.0/23 maxlen: 23
                          72.18.114.0/24 maxlen: 24
                          72.18.116.0/23 maxlen: 23
                          72.18.117.0/24 maxlen: 24
                          72.18.120.0/21 maxlen: 21
                          72.18.120.0/22 maxlen: 22
                          72.18.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:34:3d:98:f6:ce:a5:69:73:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=53d2c792-e745-42a3-8b81-a24ab4f07399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:73:94:80:bb:6e:9c:1f:d2:c1:28:27:a2:
                    42:57:44:53:0d:3a:0e:5a:1c:a5:4e:b5:a0:5e:35:
                    bf:a3:92:2e:c8:08:2d:af:ea:b3:9b:f9:f4:24:63:
                    fc:23:83:46:ed:f0:af:f0:06:9b:67:8f:5f:7e:81:
                    5f:53:7f:d4:48:16:67:21:98:de:92:36:68:10:50:
                    42:1c:50:a5:35:93:a0:75:40:62:5d:d7:49:9d:11:
                    82:41:41:d9:b5:79:11:c9:47:d6:24:fa:66:91:92:
                    9e:4c:06:2d:d3:52:6b:1d:a9:0a:77:59:61:5a:e9:
                    7c:80:b7:50:c0:9c:a9:85:88:e4:bd:70:65:c4:8c:
                    c5:09:c1:5a:5c:e7:20:d9:da:5c:96:60:5f:27:b4:
                    72:17:18:95:15:5f:a8:73:29:ca:b0:a6:34:96:d7:
                    a6:b8:5e:b5:d0:eb:79:29:91:ff:4d:a1:61:25:49:
                    86:34:dc:6a:90:b6:da:6a:3d:ce:92:ed:90:7d:12:
                    96:33:01:bb:7a:f5:f0:9c:22:03:af:49:67:e2:c6:
                    56:5a:c2:7d:e1:60:94:f4:d6:f2:db:f3:27:32:73:
                    8c:64:61:06:18:8b:52:79:06:c1:74:7c:29:2e:c6:
                    43:8e:6f:c7:fe:4c:34:f9:c5:ac:3f:ab:70:8d:d1:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C1:8E:07:3B:09:A2:A9:0C:18:61:A6:35:35:1B:2C:BF:B4:00:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.112.0-72.18.117.255
                  72.18.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:54:1c:8f:49:b9:28:51:4f:00:5a:ae:30:27:83:7f:29:
         06:ff:4e:88:66:a8:22:f6:4f:50:f7:64:8a:f3:fa:22:80:4e:
         0a:92:b5:93:0d:96:e6:e2:d6:8d:31:4d:53:39:e4:46:6b:08:
         84:c2:4b:12:d6:cb:58:38:ef:ca:df:1c:27:b6:26:14:8a:d9:
         cc:ba:d1:71:8b:1b:38:03:8e:2f:98:04:ca:9d:1d:b7:fc:cf:
         62:31:89:81:03:79:b6:7d:a2:ae:be:f6:18:cf:e0:c2:7c:48:
         23:62:32:25:89:02:2d:1e:97:56:ac:8f:86:66:a1:d4:01:1f:
         49:d9:56:80:d1:75:84:c3:c2:04:33:ef:89:f0:8e:96:84:5a:
         b6:57:af:fd:20:85:1d:6f:26:11:f4:39:12:2a:9f:9e:11:c3:
         7f:3b:fb:1f:e2:79:1c:e1:60:25:93:ed:e5:a2:82:7c:27:78:
         c6:60:fe:9d:55:d1:0e:c7:d3:43:b8:8a:42:49:70:2d:b8:a2:
         c2:e0:63:ea:d8:48:9b:d6:4e:f0:a1:1d:ed:ef:f5:2d:4a:db:
         66:bc:b1:4d:b7:3b:2b:50:53:e1:47:04:2a:ae:2a:d5:8b:88:
         77:f1:a5:bd:55:08:2d:27:66:f2:ef:ed:1d:b4:f1:b2:70:ae:
         6c:4f:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:00 2025 by rpki-client