Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
File:                     cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa (raw, json)
Hash identifier:          tpKPmuYp0QWYf8MhlLkkpsfTf6YfJGYq/HfvhrVKnYY=
Subject key identifier:   79:E3:40:3D:B2:10:71:5E:20:D2:65:72:B3:C6:32:34:B0:79:6F:E6
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584ADA9BBA70885F2D3A419C9B40
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     53334
IP address blocks:        162.252.214.70/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ba:70:88:5f:2d:3a:41:9c:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=92d2157f-1061-4a2f-8717-aad44cf65e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:f1:b3:ac:1e:ad:9c:94:24:ee:85:9f:02:
                    19:0a:e2:a0:4f:97:11:0b:fe:71:00:65:b0:b1:29:
                    a2:2f:55:a2:3a:f0:e6:a8:eb:fb:c6:20:45:ad:db:
                    89:c4:ed:97:c9:2b:dc:cf:b7:f2:ba:45:5a:10:6d:
                    69:67:42:13:83:f4:72:2a:d0:87:bf:36:05:f9:2b:
                    f4:bc:d8:a5:a8:09:ef:a5:cf:a8:c2:7c:0b:26:ec:
                    71:52:df:78:9c:95:86:86:81:a6:25:cb:46:e6:e1:
                    e0:83:a9:0b:5d:e2:76:dc:f1:c7:32:c2:fc:2d:0a:
                    51:82:46:83:73:a8:cd:c6:70:38:6d:ac:7f:1c:61:
                    b1:f0:10:e8:da:ab:48:10:8f:dc:27:9a:af:05:8b:
                    b9:0d:aa:a0:63:d1:5c:5f:e6:04:3d:d7:86:ba:78:
                    f7:dd:ae:c8:5b:be:4d:27:20:8e:32:d8:47:cc:9b:
                    85:81:3e:65:54:bc:50:ab:5d:c5:42:1f:22:3b:97:
                    bc:ae:a8:72:99:75:b5:07:4a:b0:59:76:bf:82:1a:
                    38:37:9d:eb:3b:e2:03:c3:01:2c:cd:a4:b3:8e:b6:
                    66:e0:9f:d7:1d:2f:6b:32:6b:5d:a1:fe:b1:da:fb:
                    c6:91:8c:50:ad:0c:84:00:be:4d:8c:7d:43:b9:a3:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:40:3D:B2:10:71:5E:20:D2:65:72:B3:C6:32:34:B0:79:6F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/cfd1865d-0fd7-32ef-a4b9-b653ba3aae86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.214.70/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ed:fa:08:c9:c8:75:e7:e1:c7:63:7d:b3:41:9a:11:4a:98:f2:
         8f:04:2b:8f:43:5e:b4:f2:21:39:e6:24:a5:03:4e:a8:08:f6:
         6e:65:f6:e5:d1:f4:6f:04:65:c9:45:42:43:a6:29:93:67:77:
         03:d9:85:ad:45:7f:f6:d0:40:18:96:71:81:6f:a3:f8:23:fd:
         95:b3:ef:02:3a:5a:af:28:30:04:b0:4a:cb:30:bb:ca:ad:59:
         85:3c:59:09:15:78:79:b9:65:99:17:30:e5:2d:c8:10:a5:5b:
         15:2b:4d:21:fd:cc:d2:c2:4c:e3:bc:b4:b2:9d:f6:fa:15:6e:
         ef:98:dd:38:bc:f8:7e:6a:88:93:8e:90:20:ae:34:2a:0f:02:
         b3:64:f2:d9:c5:10:10:ae:78:1f:69:88:aa:1c:40:23:af:cd:
         53:25:72:86:58:22:23:10:56:f3:41:27:ee:b2:f8:ea:c1:51:
         b2:91:38:42:fb:4d:6d:53:f2:48:b9:b7:08:59:d3:ab:ac:f4:
         1d:2e:22:4e:57:03:a0:63:a5:6c:75:e2:24:28:67:e6:26:29:
         a2:3c:e6:c2:64:72:db:38:f3:92:9a:c4:4b:53:c0:8e:92:9d:
         26:6c:a2:3b:8e:01:f4:8b:e6:97:21:44:09:04:50:29:3d:43:
         be:df:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:23 2025 by rpki-client