Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa
File:                     8527687a-07fc-3f1c-a99c-a60850d64434.roa (raw, json)
Hash identifier:          dmxq9zaVe07XK2C+ysfxuuHp/MovgPRJhWtMWJOW/EI=
Subject key identifier:   06:34:DD:EC:E9:58:FB:AE:57:EA:2F:FA:96:3F:25:B6:85:EE:24:1F
Certificate issuer:       /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial:       010D0C9F4328584B84E782534FC39FA29A7D9080
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     18451
IP address blocks:        174.34.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:82:53:4f:c3:9f:a2:9a:7d:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=ba4bfc4d-9d7f-4436-a1a9-72104abcff36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:e8:b8:b3:2c:02:ed:37:9f:a6:53:f3:07:
                    c2:eb:fa:f1:d3:c1:4f:58:e0:e4:82:a3:37:10:25:
                    03:88:e8:8c:d3:f4:11:67:6a:59:c6:ff:02:3b:b5:
                    05:ee:5d:d6:93:89:39:31:24:99:6c:f0:89:be:40:
                    19:ba:8f:31:a5:c2:c8:50:55:93:23:5f:db:6d:6e:
                    1b:8a:9e:bd:19:c0:7b:e0:7f:0e:2d:0e:57:4d:1a:
                    e5:2a:f9:7c:65:16:f1:3a:d2:a6:22:32:9a:05:f2:
                    79:fc:65:d7:5f:6d:be:2d:e9:b5:c2:23:09:c8:30:
                    e9:ac:34:54:f6:55:fe:aa:a0:28:ef:cf:14:eb:85:
                    8f:e2:c9:ce:3b:8d:4f:71:95:a6:92:fe:6b:13:9b:
                    b2:44:fb:79:9d:ce:2b:22:33:7b:f3:01:53:4d:81:
                    a5:19:7a:f7:34:a3:2c:83:8e:f7:69:48:b8:25:de:
                    c4:1c:ab:a8:91:1b:84:9d:1e:38:b3:dd:42:d9:9a:
                    cd:5c:6e:c3:0d:e3:47:06:4c:0b:73:b7:a2:10:ec:
                    99:be:fb:44:94:d1:f9:59:83:ea:2e:0e:28:41:ca:
                    7f:83:38:68:ad:fa:42:47:ca:c6:a8:9f:8c:de:1e:
                    95:36:20:dd:5a:4d:13:b9:45:74:06:c4:08:83:8e:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:34:DD:EC:E9:58:FB:AE:57:EA:2F:FA:96:3F:25:B6:85:EE:24:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl

            X509v3 Authority Key Identifier:
                keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:93:30:27:16:02:fc:d0:ff:33:cf:63:f4:8c:23:59:aa:
         e1:ab:e0:3b:f3:06:72:79:98:7e:8e:f5:7b:e6:79:fe:3c:64:
         ca:21:2c:af:eb:4e:91:f7:ab:2d:fc:a2:87:a1:66:e2:9d:f1:
         9f:bc:a9:f7:fb:a5:0e:76:23:0f:fa:7a:4b:28:d6:fe:e3:44:
         57:c4:4d:8e:82:be:6b:62:43:c3:9d:b6:40:22:9a:b5:6e:fa:
         76:1a:0e:39:fb:73:34:ab:4e:83:d3:c0:83:e4:2c:b5:1f:b9:
         02:df:13:93:f6:f1:df:bd:8c:01:98:ab:45:1e:e6:61:02:35:
         5e:75:47:e1:3d:dd:4b:b7:4e:1d:d3:ad:2d:31:34:c4:6e:58:
         25:7b:bf:b2:e9:f6:20:e2:96:7d:26:e9:4f:fb:c3:f9:bc:b6:
         88:d6:6d:cc:60:f8:c2:ab:f9:47:4d:43:35:de:82:38:9a:83:
         f2:62:cf:ba:26:23:91:5f:e7:05:8c:7d:d9:4e:2b:68:c2:1f:
         99:e3:9d:78:94:c0:53:a5:f9:35:11:4f:95:0a:be:17:8a:c0:
         44:fa:a5:4f:bc:09:50:8b:f3:2e:a6:67:15:1f:6e:f5:a4:83:
         ef:85:0d:a5:0b:7d:5d:dc:84:03:81:45:69:a6:84:45:bf:19:
         77:d9:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:46 2025 by rpki-client