Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa
File:                     37c207ef-3109-390a-8c00-0f9195cf738d.roa (raw, json)
Hash identifier:          iSllFDud4R66S0kBRrNG72wK7eJfhTOMk3/bI1UKPw0=
Subject key identifier:   86:42:EF:31:45:3A:05:74:EC:D1:83:6E:0D:F4:17:93:13:36:32:E8
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584A8575FF8D7435FBADDC324D00
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     55039
IP address blocks:        199.231.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ff:8d:74:35:fb:ad:dc:32:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=5e1499e6-4764-4837-80aa-d6fbefc267cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:bd:c6:19:8d:e0:b4:0e:8f:40:9b:5f:8a:
                    2e:c7:20:a6:b5:e9:4c:34:1f:87:0d:ac:39:83:de:
                    cc:15:67:ec:7e:b2:68:b6:ad:b1:aa:de:a5:0f:25:
                    19:c7:b4:dd:7a:94:39:02:09:62:f8:a4:29:39:76:
                    fe:47:24:e3:86:b3:ac:b9:49:c2:3c:4e:e1:72:6f:
                    76:41:38:a6:54:b2:45:3d:09:3c:6a:7f:da:70:6e:
                    f8:95:18:16:a9:bb:0f:8f:69:1d:0e:f7:d8:90:a0:
                    a8:58:20:e5:8b:3d:c6:2e:f1:0b:fb:5c:c1:3c:d1:
                    0d:aa:ec:9a:c7:79:3f:b6:6c:48:aa:7f:f8:46:7f:
                    b6:43:e7:f9:cd:92:60:17:c1:db:0a:a0:1b:bc:bc:
                    f2:33:ae:55:f5:f7:b4:44:a3:1a:58:0d:ce:4d:b6:
                    78:32:e2:b0:54:0b:63:05:c6:0f:8a:86:e2:08:bb:
                    c0:31:4f:b5:b0:8d:f6:31:a6:d3:9a:c7:60:09:fc:
                    49:0c:f4:da:16:2e:10:9d:0f:b0:21:fd:1f:72:6f:
                    80:4a:76:20:2d:25:79:72:c3:d0:be:21:80:81:22:
                    cd:57:4e:e8:a3:01:be:92:08:8b:7f:1b:76:5f:8e:
                    e8:49:fa:36:00:d6:e8:56:ea:05:99:ca:c1:f2:3a:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:42:EF:31:45:3A:05:74:EC:D1:83:6E:0D:F4:17:93:13:36:32:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:44:59:8a:79:3c:60:d4:47:98:50:92:eb:38:7b:b4:ea:
         08:7b:1b:e5:7d:36:78:a3:76:38:af:64:3f:40:3c:5b:e0:4f:
         18:a9:d0:1b:0f:73:88:62:6c:c9:92:28:3c:ac:6b:57:98:b8:
         d7:b3:fb:7c:0f:1f:47:55:25:2a:f1:e7:50:1f:95:b0:52:9f:
         fe:cc:eb:89:94:0c:27:a3:fd:bf:50:51:d3:01:bd:9f:57:c3:
         68:14:03:e7:44:cf:1f:f4:65:27:28:ec:d0:63:9e:61:ff:62:
         59:8a:31:d2:83:e3:fd:3b:7f:a1:cf:5e:66:34:b2:ab:1f:9e:
         7e:56:7b:c8:74:fd:35:66:ae:02:fa:3e:8d:99:e6:83:d2:c7:
         b4:16:b7:4b:a9:24:04:dd:d1:4b:74:b9:43:18:40:14:73:0e:
         a6:66:4a:d4:02:64:11:36:0e:1e:23:c3:95:f7:46:a9:1e:12:
         1f:14:0d:90:25:8d:e4:a1:ed:e6:61:60:2e:83:fa:0e:09:ac:
         e4:a4:5b:bf:85:a5:58:ce:ee:29:bf:de:15:a3:7c:8e:e9:99:
         08:26:15:01:44:c8:87:4d:51:0a:4d:b2:0a:c6:8e:66:85:18:
         7a:bd:90:5c:82:b0:3f:b6:4f:28:14:bd:7f:ed:bc:71:33:9c:
         e0:e9:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:16 2025 by rpki-client