Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa
File:                     7b55b087-2f80-305a-8888-8ca670e0303a.roa (raw, json)
Hash identifier:          hBfPQSxR0C8XKu+teYOhMlWj/VwWn0wfiC7Qbh4bxFE=
Subject key identifier:   A5:7F:EB:A5:30:BD:EE:49:AD:62:06:AF:56:EA:D6:8A:44:43:3E:22
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A56004DF6D1CF74FCAD425600
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     13768
IP address blocks:        64.226.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4d:f6:d1:cf:74:fc:ad:42:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=d4e78fed-1017-47b8-82b9-21bab482affd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:4f:aa:0c:fa:e7:39:79:be:19:64:79:11:
                    08:03:64:9e:ec:77:66:09:d8:48:e5:ee:7c:e3:1b:
                    3c:68:91:0f:c2:7b:64:d7:ec:c3:34:8c:5f:fb:ea:
                    d9:2a:4b:86:57:75:45:12:ee:07:a0:64:4d:5c:1a:
                    2d:97:ab:94:26:46:a7:9e:04:9f:da:06:d1:bc:48:
                    de:1b:8e:50:9d:96:aa:14:fe:06:01:fc:94:70:e8:
                    d3:92:0f:51:64:dd:b5:7f:d0:05:0b:03:bd:84:c7:
                    76:55:ce:9c:7a:8b:0b:c0:c5:dc:66:31:78:a5:5d:
                    66:52:82:f2:69:66:c8:eb:a1:a9:ee:02:b2:63:59:
                    83:73:bd:69:08:1b:b0:6f:14:08:3a:6d:55:c6:ec:
                    7d:f0:97:46:66:bf:a8:1d:69:1a:02:3b:32:52:61:
                    83:c1:5d:3a:84:d2:72:45:1c:df:9c:2e:49:b6:b2:
                    a6:3b:ac:ba:55:e0:ce:2c:eb:f6:5e:4e:be:65:29:
                    9c:9c:a8:d0:f0:a5:9a:60:c4:1b:66:3a:5d:46:c9:
                    3a:3b:60:f5:9b:5e:53:b7:6a:d0:a8:22:69:23:27:
                    ae:4a:68:9b:e2:39:02:4b:f0:f3:cd:2f:4a:1a:aa:
                    b5:e8:5d:08:c5:7d:01:91:67:02:ec:12:db:0f:36:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:EB:A5:30:BD:EE:49:AD:62:06:AF:56:EA:D6:8A:44:43:3E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7b55b087-2f80-305a-8888-8ca670e0303a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:a6:14:d3:60:73:29:13:77:58:f4:58:56:fe:a0:f9:6a:
         5f:20:20:dc:44:65:ec:95:39:22:b8:ac:f9:61:7f:79:0f:a1:
         a5:2e:01:c9:79:92:89:15:b1:37:e1:70:00:0f:04:4d:cc:67:
         44:d9:1f:18:66:38:10:5b:d0:ce:6d:2a:4e:41:2e:c8:45:fd:
         29:97:e4:ed:7d:a3:2a:3f:65:ba:d2:cb:0f:a6:1c:60:f6:e8:
         79:14:47:66:95:bd:2c:79:31:05:c9:79:cc:55:f9:30:fe:58:
         74:2a:9b:54:32:4b:30:f7:f4:03:b7:05:08:78:94:e8:be:05:
         0e:97:44:1e:7e:c3:d4:88:23:94:7a:90:c0:3f:31:eb:3d:56:
         25:74:34:8a:6e:14:b1:e8:80:72:22:8d:75:d5:8a:ec:ae:2a:
         62:34:ef:cd:8c:17:3e:c3:46:d5:a1:ff:04:eb:77:b6:51:87:
         c5:7a:04:9c:8d:38:34:03:34:a3:38:e4:e8:e1:a7:6f:d5:38:
         24:21:fd:9c:a9:62:46:e7:59:49:31:98:45:4b:af:00:0c:fe:
         21:d7:b9:f5:fa:5b:15:3e:76:6e:60:29:a9:7f:97:a9:32:28:
         a9:d8:0b:ea:8d:3c:ab:91:f9:67:79:4c:e9:04:67:9a:b1:1c:
         34:f8:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:14 2025 by rpki-client