Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481eecbd-fded-37fe-aa6c-2aa5adb66d21.roa
File:                     481eecbd-fded-37fe-aa6c-2aa5adb66d21.roa (raw, json)
Hash identifier:          BT3smUfTgt6OwkVtX+2wITWQgDZQ+qSPFrKrnzR1GdM=
Subject key identifier:   7A:61:12:79:58:34:3D:7F:83:7F:4F:5E:59:05:E9:72:EC:DF:35:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1FECE64ED2267086572C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481eecbd-fded-37fe-aa6c-2aa5adb66d21.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        174.166.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:fe:ce:64:ed:22:67:08:65:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0d5866cd-cb91-473b-b027-4ce23df46a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:9c:09:54:d4:c5:c2:77:86:19:3c:a3:e9:
                    29:23:7d:b1:59:e3:9b:a6:85:1e:fb:e8:09:d5:72:
                    25:46:82:c2:cb:e0:66:3c:aa:6b:9e:83:b7:28:e2:
                    29:5b:8b:20:ca:93:28:a6:80:fa:61:f3:6f:66:73:
                    14:02:86:2e:73:10:07:1e:a6:46:fc:88:f8:bb:31:
                    60:4f:62:3d:cd:7d:a9:e6:3d:93:bc:70:17:9a:f1:
                    30:ba:f0:1f:94:9b:0b:12:c0:6c:b7:a1:61:9e:db:
                    32:38:d4:2d:63:b1:06:5f:51:68:da:58:8d:6c:63:
                    2d:7c:48:74:6f:fa:37:dd:79:9f:5a:4b:ad:71:0d:
                    34:60:86:ea:b0:61:72:2f:f2:86:55:84:ac:17:38:
                    0a:07:40:f1:a5:12:81:80:14:0d:46:e3:7a:e3:80:
                    de:ef:04:65:af:b7:f8:ef:39:e7:38:d6:d8:99:34:
                    05:14:aa:16:a4:f1:43:76:8d:77:39:90:79:d2:6e:
                    10:5b:3e:43:0b:bd:a4:eb:60:36:1b:db:a6:8a:c9:
                    ac:a4:a9:04:a1:f2:29:61:a0:7d:46:38:8e:77:aa:
                    2c:12:60:95:91:61:02:a5:b4:6a:78:d3:8e:4d:3d:
                    72:b7:d2:11:b5:ad:6d:36:30:54:b6:79:87:8d:4c:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:12:79:58:34:3D:7F:83:7F:4F:5E:59:05:E9:72:EC:DF:35:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/481eecbd-fded-37fe-aa6c-2aa5adb66d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.166.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:55:ba:53:bb:70:4a:61:90:c4:86:6f:a7:20:4f:8d:4f:d6:
         57:0c:6c:2d:f6:fe:8d:78:13:28:1f:34:bf:1f:67:ca:de:7a:
         7a:87:6a:37:fe:08:1f:d0:7f:b7:e5:13:d6:f8:d7:f5:a2:70:
         e3:f2:6b:bd:cd:0a:e3:e6:f5:dd:a7:27:b3:63:fb:b9:0c:d3:
         d7:73:1e:1d:98:c8:de:b5:6e:0e:da:99:91:23:d7:7c:f0:4a:
         e1:66:26:60:1e:70:0b:96:5a:94:f2:73:eb:ea:7e:67:f4:8a:
         19:06:e6:74:68:94:8c:01:12:22:75:cc:eb:74:74:85:ba:f6:
         5b:9b:e3:e0:c7:97:0a:a8:5d:ca:a7:84:03:dc:40:a5:8a:f6:
         77:08:c2:7f:ac:1a:57:9b:9e:f3:18:f6:c6:01:22:02:16:a3:
         45:77:39:9b:a9:6d:2f:f7:c3:ee:db:a0:e2:0e:af:d5:f4:df:
         da:ea:52:67:db:9e:a1:b9:2b:55:04:4e:7b:b0:57:b3:4f:bb:
         b4:e3:fc:63:0a:62:2f:8a:ef:80:47:e1:2d:38:55:df:fc:a6:
         4f:04:04:4b:e1:70:9a:88:4d:77:24:46:51:22:74:85:eb:dc:
         fd:3c:a7:97:8b:3d:68:f8:f4:b2:d1:d5:bb:5d:ed:07:0c:c5:
         9b:b6:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:21 2025 by rpki-client