Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File:                     82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier:          WzAtA1nrdMsyJkwV4mG1alFevn4jhauj1mcvyqvLPHA=
Subject key identifier:   94:78:CD:00:7A:79:DE:74:97:81:54:38:46:0E:27:DF:B1:FC:13:21
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F4328584AE196870E77FFF7260B84AB90
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     54665
IP address blocks:        66.128.128.0/20 maxlen: 20
                          162.220.84.0/22 maxlen: 22
                          192.190.88.0/22 maxlen: 22
                          198.177.52.0/22 maxlen: 22
                          199.59.112.0/22 maxlen: 22
                          2605:4680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:87:0e:77:ff:f7:26:0b:84:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6f74471f-3b67-4110-86a1-60df35e49956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:ad:32:6e:93:f5:36:31:8f:76:6e:0f:4d:
                    8f:d4:e6:d9:2d:68:7c:c3:a6:3a:b1:0b:09:38:ed:
                    d5:9c:33:52:7c:82:9b:70:ff:82:67:8f:cb:61:6a:
                    b8:8b:78:7f:aa:c2:1b:04:e5:b9:3d:c8:65:93:e1:
                    ff:5f:01:03:98:9f:fa:4f:9d:e1:2f:76:d9:39:eb:
                    a2:74:ca:78:bd:b3:7e:91:dd:08:6b:ac:68:14:3e:
                    4a:b4:fa:e2:6d:99:ee:9d:53:34:17:82:ae:c3:aa:
                    dc:c0:75:a1:85:b2:61:63:52:31:44:70:01:7e:eb:
                    27:cd:cb:70:95:36:bc:63:98:ec:13:74:d4:9a:fc:
                    b6:34:76:e3:a9:34:41:54:24:1b:b2:8f:bf:6a:21:
                    96:8b:fc:7a:4f:8e:24:f3:e4:f4:21:09:a6:c9:62:
                    76:dd:a6:d6:ee:a1:70:4e:99:76:5b:79:09:2a:ec:
                    b2:20:75:f0:0f:70:10:9b:57:22:85:47:ce:37:e6:
                    48:75:d6:79:d9:99:25:42:9b:39:33:36:9c:dc:83:
                    d2:62:39:66:05:dd:d2:c8:6f:c7:59:86:76:1d:8f:
                    ba:79:8c:94:61:60:95:94:cf:af:8c:64:9a:18:67:
                    05:8b:c2:de:67:11:cf:c0:75:28:8a:14:69:72:ca:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:CD:00:7A:79:DE:74:97:81:54:38:46:0E:27:DF:B1:FC:13:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.128.0/20
                  162.220.84.0/22
                  192.190.88.0/22
                  198.177.52.0/22
                  199.59.112.0/22
                IPv6:
                  2605:4680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:66:a2:47:b2:36:8a:a8:7f:0f:9f:77:c4:24:ac:b6:c4:
         e7:cd:2a:81:1b:e1:03:88:fa:f1:dc:0e:46:38:d4:85:59:62:
         50:15:24:5b:9d:da:c1:a4:13:e0:69:91:a6:a9:7d:d2:f5:cd:
         c7:69:23:11:b1:67:dd:c9:9d:ae:81:5c:88:38:fa:60:ce:38:
         40:32:81:60:bf:b4:9d:4f:6a:37:ef:24:aa:2e:b3:75:aa:98:
         b6:05:6f:90:1a:ee:46:e5:ed:24:35:63:f6:5d:60:f6:98:b1:
         8f:f6:3f:57:40:82:c9:93:36:b2:3b:0f:e0:8f:6d:0a:90:15:
         c2:3e:8b:7b:8d:9d:9a:78:f7:2f:19:e7:8d:55:0d:e4:b9:59:
         c6:3b:f3:04:4d:db:5e:0b:ca:1b:56:98:6b:8b:86:32:cd:24:
         75:95:c0:89:7f:59:54:75:86:09:ae:34:79:e3:9f:ab:24:f4:
         6d:a1:d0:b9:88:ab:7e:57:c3:88:78:b7:99:4e:4c:1e:4b:79:
         35:e5:f6:01:b0:85:ee:a3:c1:61:9d:58:9a:3a:1c:9a:52:77:
         34:22:78:dc:66:48:0e:2d:40:4e:58:b2:62:cc:9c:75:df:08:
         86:8f:b0:68:b5:4c:2d:80:ca:aa:cb:04:14:9b:db:d6:f7:c8:
         18:71:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:21:11 2025 by rpki-client