Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
File:                     e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json)
Hash identifier:          i78LnxTAJtvScU74e7jKdzwI7/pmufNNk0u8XIdQ//A=
Subject key identifier:   74:7E:D6:B7:CA:23:B1:C2:10:F6:9A:AD:1A:4F:B8:51:E1:9E:16:52
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584AE4610A6FC95BEF93A14AE700
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14061
IP address blocks:        164.90.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:0a:6f:c9:5b:ef:93:a1:4a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=9e852432-100f-477b-b25c-6eff3c72470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:89:fc:1d:df:02:03:23:3f:2b:f2:d3:52:
                    71:06:c8:cd:21:e3:61:7e:e0:d1:75:63:35:64:7c:
                    cc:17:1a:49:81:6f:22:bb:7f:bd:21:9c:44:71:94:
                    a0:77:b9:68:b6:38:b9:f7:f1:34:be:a7:f4:2a:e2:
                    7d:da:62:3b:f8:a8:c4:57:a6:e2:f2:d1:dd:27:1f:
                    f2:00:a4:f0:35:43:9a:ad:ec:3e:88:de:50:61:f5:
                    9f:0e:e4:cc:3e:43:78:23:b1:ad:a6:70:98:b2:86:
                    a1:a0:ed:47:e6:56:06:53:9c:45:8e:aa:2b:0e:3c:
                    76:32:d2:c6:47:30:c1:b5:ab:f5:84:e7:a9:a4:d1:
                    b5:4e:2b:5a:ea:cd:f7:92:a3:69:06:bc:39:75:cb:
                    29:5e:b0:b0:30:bd:ab:62:7c:f6:1b:87:4d:2c:94:
                    79:2c:f2:25:c4:07:25:93:73:e7:57:50:9b:b2:3f:
                    d9:fb:ea:7c:86:99:04:40:55:70:11:61:81:d8:38:
                    83:29:d6:48:71:39:73:8c:e3:df:1f:7c:9f:de:e9:
                    59:aa:04:0c:d8:11:18:bf:e3:b1:98:84:65:76:eb:
                    7d:eb:98:ca:95:57:90:6b:f4:8a:ba:04:2e:78:1d:
                    45:e6:d4:05:5a:57:6d:61:8d:e5:72:7d:fe:c4:9d:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:D6:B7:CA:23:B1:C2:10:F6:9A:AD:1A:4F:B8:51:E1:9E:16:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.90.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:37:f6:cc:a6:5d:95:4f:e4:cf:e7:fc:ad:31:20:b7:c1:5d:
         cf:59:3b:81:82:d9:7f:59:75:f9:fd:6b:05:54:ed:9c:8b:bf:
         c3:fb:0f:7d:48:bc:13:e8:e9:73:35:33:c7:d2:d3:1b:0a:87:
         7e:a4:8c:e9:51:d9:ab:a7:df:34:27:64:0e:29:a2:26:65:5b:
         e0:74:34:1f:45:36:29:05:3e:05:cd:c9:45:e0:3b:d0:72:06:
         f3:4a:36:c4:92:9b:0d:8f:ad:32:10:45:61:a5:fb:b1:a7:1f:
         e0:c6:2f:71:14:3f:cb:27:47:7c:6a:b7:59:1b:7b:8b:00:1a:
         57:cd:c9:de:2c:ad:2e:62:04:7b:c4:2f:11:e4:ff:2c:68:8a:
         ca:ec:81:84:ef:8f:01:96:3c:cf:34:2f:4b:07:b3:93:a1:e8:
         9a:fd:20:2a:90:df:71:0f:a9:55:e0:db:86:6a:68:45:50:49:
         6d:65:cf:e4:a6:60:5f:f9:bb:2f:3b:78:f2:5b:23:3c:22:ee:
         ff:73:a4:a4:6b:c0:18:85:45:65:9b:9b:6b:f1:ca:65:1b:0f:
         c6:a7:c6:4b:9a:ec:9b:6d:70:8e:33:b3:41:d0:3c:02:e1:86:
         32:08:3d:97:70:39:61:07:2a:d8:32:af:74:81:32:fe:81:2e:
         45:e8:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:02 2025 by rpki-client