Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3907a85c-7322-3ea5-9ddc-eeee1fc44f6e.roa
File:                     3907a85c-7322-3ea5-9ddc-eeee1fc44f6e.roa (raw, json)
Hash identifier:          y23Oep0IifmnAxSyrXx5MDD78Q55CXcNvUNJlPCHu40=
Subject key identifier:   53:EC:B8:DE:C0:C3:79:A0:52:51:AE:77:09:00:E7:59:E9:E1:40:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2D8D26E8300E42C0AE280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3907a85c-7322-3ea5-9ddc-eeee1fc44f6e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        174.160.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:d8:d2:6e:83:00:e4:2c:0a:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=225ab368-21e4-4aef-998a-e73ad54a880c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:d5:90:95:36:ba:5d:86:f2:22:15:8e:6b:
                    3b:6a:1e:e2:ff:77:0c:63:c1:a7:c6:ad:f0:31:17:
                    86:26:ea:fe:4f:09:95:cd:a9:43:6b:d4:71:b8:d9:
                    ba:15:53:56:5e:99:50:f3:cb:1e:4e:e7:1c:a6:b9:
                    a8:a0:92:77:96:12:d5:74:ae:e2:8b:cd:1f:fe:35:
                    8e:52:83:fc:01:b5:9a:7b:f8:28:84:3d:07:4a:ee:
                    10:27:47:01:b1:8f:bd:f2:4c:93:12:e0:c7:37:f3:
                    48:ec:4c:13:a4:00:23:e9:0b:4a:93:1f:04:c4:26:
                    91:7e:17:11:e3:a3:9d:db:e0:2f:2b:40:70:7a:ad:
                    a5:9a:95:23:4a:56:78:47:56:2f:2e:f5:ae:4d:2c:
                    fe:c7:85:01:8f:3e:16:02:8b:67:8a:35:9b:39:94:
                    96:88:e9:6b:76:92:fa:79:a8:dd:1d:6a:ab:a0:af:
                    de:39:d2:e0:0d:92:5a:51:40:1d:c7:32:86:b3:78:
                    32:28:75:f5:94:ea:08:3f:21:ca:9e:a3:fe:e8:94:
                    04:27:eb:64:b6:47:5e:e9:e8:f9:94:7c:63:7f:82:
                    8f:d3:08:19:da:05:7b:5f:0d:98:39:e9:83:71:43:
                    89:85:d8:4e:4d:d5:9c:64:24:69:fa:27:0e:b6:13:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:B8:DE:C0:C3:79:A0:52:51:AE:77:09:00:E7:59:E9:E1:40:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3907a85c-7322-3ea5-9ddc-eeee1fc44f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:76:a2:b4:00:6d:d3:e6:bd:93:b4:d0:04:e9:44:b8:51:1f:
         ef:d5:4f:9c:f3:e0:c4:5c:8d:b2:28:db:7f:70:39:94:28:df:
         f0:3f:e0:8e:f6:7e:5d:4a:2d:7b:f7:f5:81:27:09:12:f1:7b:
         6c:82:85:11:ae:2a:ed:32:37:29:a8:65:02:42:e3:81:4b:3b:
         30:3f:85:0d:97:77:ce:69:e3:82:3d:cf:ef:e8:3e:ac:85:d9:
         bb:9c:ea:3f:ab:c4:5a:05:d2:68:64:29:5f:42:46:08:1e:1e:
         65:2c:ba:29:c8:7e:d0:1e:ff:48:0f:75:8f:b1:e0:9e:b8:bf:
         26:c3:92:81:77:9f:93:8a:e4:57:ca:98:76:6e:f2:de:61:97:
         58:25:5e:25:e3:47:28:88:93:21:6c:57:3a:89:cb:6f:b3:f8:
         85:69:14:48:ef:81:9b:05:67:c7:5a:6d:ae:92:3b:29:c2:90:
         19:1b:15:8a:87:de:8d:77:c3:9c:64:c8:4d:1a:f5:e4:40:72:
         8f:7c:df:e6:03:48:79:86:47:01:45:07:1d:2a:83:d0:45:b0:
         31:4d:58:bd:f5:f3:f8:5c:f5:61:7d:e8:1e:cb:02:03:c8:35:
         fa:1c:78:d6:29:1d:57:54:26:c9:bc:90:05:25:dd:a7:e3:65:
         0b:bf:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:44 2025 by rpki-client