Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          vEE5H29NJ1eYpgn39lJDSeNBWPsdNHpsy5yn4SG4EhY=
Subject key identifier:   D1:F4:72:EE:BC:01:04:13:AE:CE:F5:FA:C1:49:DC:C2:D2:93:60:A3
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584AD23BD33217A60F6E15D98EE0
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d3:32:17:a6:0f:6e:15:d9:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=ccf7152a-7219-48ce-bae1-60a0ad814384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:0b:7a:ce:00:cc:31:1b:58:f6:39:3a:9e:
                    c7:38:45:0e:e1:88:55:1f:36:b1:f1:e4:a4:34:0a:
                    58:a9:92:b0:5e:49:d6:35:61:6b:73:5a:32:38:92:
                    ce:39:7d:62:2a:49:e2:bf:c9:c4:c6:9c:1f:3a:4c:
                    3d:f8:3d:4c:f9:2a:71:bb:f7:ba:4e:b7:d4:92:5b:
                    f0:22:c6:c5:14:2b:11:1d:17:1c:4d:8c:cb:fb:27:
                    db:77:c5:4b:92:85:3b:c3:26:a5:a2:6d:da:f7:77:
                    08:65:18:0c:d5:e2:41:e8:86:2c:31:ec:bf:50:63:
                    39:13:21:4d:fd:e0:ef:ab:81:ef:e6:58:61:f8:4c:
                    1c:19:45:88:b6:41:52:a9:63:68:fc:d2:10:01:8f:
                    36:33:09:56:88:3c:60:c0:74:dc:c2:ff:ec:69:b3:
                    1b:2a:88:18:90:82:7d:f2:8e:a6:1a:b8:c2:ac:47:
                    33:2f:08:e7:e1:1e:e4:87:07:6c:27:bb:75:e0:6b:
                    61:3e:6b:24:5d:3f:88:a6:5a:fe:3b:03:cd:fa:15:
                    95:a0:6e:0d:47:90:be:a1:8e:93:05:a9:d0:3a:be:
                    20:f4:48:1f:85:4c:73:d6:ff:46:6d:b2:82:f6:79:
                    f7:1f:68:b1:a2:8d:d9:02:99:7d:cd:dd:18:fd:48:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F4:72:EE:BC:01:04:13:AE:CE:F5:FA:C1:49:DC:C2:D2:93:60:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:d9:fc:49:c7:48:56:aa:84:65:f5:62:55:ae:77:a6:bb:
         ee:ae:93:f7:58:8c:6b:c0:20:2b:57:07:08:c0:bb:2a:3e:22:
         62:be:41:34:90:99:a2:0a:cf:fd:26:e7:2e:a2:17:bf:bc:c2:
         2c:8e:54:3c:bc:92:f7:76:cb:ac:bb:c8:50:1d:3e:c0:0d:23:
         07:40:80:ed:b0:ce:02:a3:00:91:df:71:1f:d0:5f:35:6a:ad:
         94:4c:45:6e:78:c0:ff:c2:58:36:50:a7:b2:76:18:e8:68:50:
         0a:54:74:5f:c7:1d:45:08:ed:b4:33:8c:58:8b:31:bb:ec:91:
         52:5e:ae:89:54:ee:64:4b:ce:af:65:df:bb:f8:ae:5e:f8:0f:
         d1:88:ca:00:5f:5d:ea:f8:c6:88:15:5d:5b:b6:67:f1:a6:97:
         55:cf:e5:2f:09:ae:9e:44:e4:89:b1:f1:9f:f2:a0:15:9f:b1:
         b7:76:ed:68:2e:6c:c2:4c:4e:78:2b:39:e5:c5:d6:44:7f:e1:
         13:fc:79:a4:e8:98:e5:ee:ab:89:f8:3e:5d:d0:38:65:87:dc:
         33:23:9a:65:15:95:65:01:d5:26:e8:38:40:9f:22:8a:0f:75:
         87:b2:77:62:21:9b:fb:56:26:5b:d2:24:cf:70:74:4f:f6:7a:
         f9:99:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:40:02 2025 by rpki-client