Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2752b566-8a7f-3e77-bb4b-f58ea6ba610f.roa
File:                     2752b566-8a7f-3e77-bb4b-f58ea6ba610f.roa (raw, json)
Hash identifier:          MtTUDN4qBCtJtlBXZb5PjYhNPXRRkKc1s/PYQyi2rS0=
Subject key identifier:   EC:5F:D4:A4:31:15:E9:53:09:D8:15:C5:F7:A4:57:DC:74:F5:DD:77
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B41E719D53F0DD35D7D1CAC00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2752b566-8a7f-3e77-bb4b-f58ea6ba610f.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        65.39.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:19:d5:3f:0d:d3:5d:7d:1c:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=877084cd-4724-48dd-9ef5-314fa9972b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:6d:7a:b8:49:03:ac:3b:cc:da:db:73:ae:
                    21:2a:3b:df:fb:bb:6c:05:b6:45:a8:0c:c5:37:01:
                    ee:50:5b:c8:c2:79:d1:e2:53:eb:18:12:52:47:c1:
                    e9:5e:36:75:9f:72:13:64:ad:ee:48:28:37:88:71:
                    88:fe:8e:4d:07:47:45:1d:1d:ed:4a:77:2d:98:dd:
                    d5:ef:5f:12:a8:2a:2f:ae:48:eb:16:5b:b7:15:a5:
                    23:72:1b:00:d9:e3:75:9f:5b:6f:6f:ec:cf:e5:06:
                    e4:2b:8d:1f:8f:c6:29:d6:c4:ea:f5:02:f1:34:18:
                    38:24:1b:c8:83:c2:2d:0e:67:c6:7b:26:3d:d3:12:
                    b0:f0:b5:09:63:cb:33:b4:e7:a0:05:90:65:87:c0:
                    d9:d5:fa:b7:97:5a:63:33:52:7e:68:37:39:91:58:
                    fc:7b:85:77:a8:2d:b3:72:79:17:94:c3:ba:25:7f:
                    b7:90:aa:1d:5e:1d:26:01:34:ee:19:e7:34:f4:f4:
                    3c:1b:bc:01:00:94:27:1c:27:58:62:5c:6a:15:58:
                    27:70:64:dc:69:26:d9:ee:c8:ae:9a:4d:af:6c:7d:
                    4b:5b:e4:93:e4:56:11:5c:2b:8c:f3:bf:93:a3:88:
                    65:8f:ea:80:21:06:8d:01:d0:08:a8:94:a5:ee:57:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5F:D4:A4:31:15:E9:53:09:D8:15:C5:F7:A4:57:DC:74:F5:DD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2752b566-8a7f-3e77-bb4b-f58ea6ba610f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:97:78:b1:4d:bf:7b:2a:a3:dd:76:92:1f:a8:31:66:c6:
         98:75:24:ec:60:5d:75:9e:72:49:78:2d:95:6b:fd:e1:30:05:
         35:20:0c:5c:45:5d:cf:cd:6b:12:58:f6:d4:bc:c0:cf:c1:ac:
         4f:94:ff:1e:6a:bf:de:33:ba:0b:0b:40:06:13:20:a0:77:9f:
         6f:5c:71:e9:1e:5b:35:50:48:19:f4:88:d0:24:fd:84:7f:c6:
         f2:3f:c5:b4:94:75:13:6b:82:77:82:c4:7a:1d:da:41:3a:da:
         7f:f7:86:78:81:da:81:e8:9e:1e:eb:42:7f:cc:15:61:e4:33:
         02:49:9d:5e:97:13:58:56:0a:eb:d5:95:2f:92:10:3f:66:20:
         e1:08:92:b3:5b:a8:13:4f:b7:f1:af:bf:dd:86:c8:bc:9f:47:
         a9:ab:dc:12:09:e8:90:0e:82:d5:76:38:6a:fe:96:64:93:ff:
         30:fc:43:66:ef:e9:d4:a0:58:b9:e1:e1:19:b8:6e:f4:c1:a6:
         1e:e6:d4:31:84:e3:bb:58:6d:85:72:9c:1a:ad:b4:93:05:d6:
         72:d1:da:8c:28:66:d8:99:46:02:96:91:d7:c7:bd:4a:6d:66:
         49:21:87:56:02:93:61:71:27:76:af:5a:41:a5:0c:3f:71:a4:
         13:db:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:49 2025 by rpki-client