Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
File:                     eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (raw, json)
Hash identifier:          7GNI9OeDZLeb9+5gzMcXgeAoSAaeCd8g1ig2zTFJkP8=
Subject key identifier:   EE:72:48:ED:DA:5A:C2:8E:CE:32:88:2E:A9:0C:14:BC:76:D4:2C:E3
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584AF7EBD90247AA26808FEEC0A8
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     398210
IP address blocks:        168.220.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d9:02:47:aa:26:80:8f:ee:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=54b198a0-c707-400d-80e1-1da725546bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:c1:26:26:d5:91:51:3b:b2:27:0c:31:81:
                    09:ed:4f:62:c6:8c:44:9b:3b:a3:2f:30:23:81:fb:
                    3e:bd:ff:47:32:13:23:84:9c:92:a2:28:90:73:f8:
                    18:20:71:84:d5:24:88:4b:68:6c:55:ed:d3:8b:de:
                    e6:51:0c:69:93:c7:e7:ab:a6:8b:41:62:a7:a5:0b:
                    5e:1c:d4:74:13:0e:ab:16:92:9e:9f:8f:e3:8c:8b:
                    63:de:e9:f9:ab:cb:82:61:37:59:77:61:aa:24:59:
                    79:ad:43:d1:7e:a9:59:e2:ba:3b:85:2e:9f:e4:35:
                    ac:5f:04:ac:7b:e6:a7:aa:e6:d0:96:b8:b9:1b:e8:
                    3b:bd:e2:0e:58:c1:4f:56:e0:20:13:1e:a6:15:cf:
                    04:8e:c4:e1:2d:c2:03:87:26:a3:82:58:c6:b3:3e:
                    48:db:5b:36:e5:fa:12:88:18:ab:2a:fc:80:2e:78:
                    f6:85:13:f8:3d:36:2e:70:f7:e0:e0:55:b5:3d:e7:
                    59:da:11:89:54:72:ac:c7:d5:6e:5c:88:cc:7c:44:
                    60:1c:07:40:f6:0e:75:98:c9:12:dd:c3:25:22:62:
                    13:c9:ed:a4:b3:e5:a9:77:24:2b:a7:af:fe:6c:f5:
                    1b:d8:64:be:46:15:52:a0:27:3d:69:3f:f2:1e:2e:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:72:48:ED:DA:5A:C2:8E:CE:32:88:2E:A9:0C:14:BC:76:D4:2C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:7e:ad:14:8e:c6:20:82:32:55:82:95:aa:25:a7:a5:5b:
         d0:ae:10:cf:8e:2a:fc:0e:ca:b6:4e:ad:a4:71:0e:56:2b:fe:
         56:25:98:f7:d1:c6:ed:ae:c2:ef:42:3f:81:21:97:fa:87:e6:
         d7:3f:97:db:74:46:89:36:12:5d:da:fa:ae:40:df:4d:d7:3d:
         5c:0c:b6:c6:3d:54:29:89:dc:a5:8e:62:98:0d:51:b6:d2:03:
         f1:ec:11:12:ed:8e:a7:c4:9d:c1:06:91:d5:2a:22:97:7e:67:
         fc:cd:b9:62:6a:5c:8a:14:69:96:ff:68:2d:04:99:d3:d6:05:
         29:43:89:be:3e:43:4d:7b:d7:d4:64:ba:ba:ad:1c:f2:58:e4:
         b1:02:a1:41:24:ff:a8:ba:0d:16:fa:fb:29:ff:c7:93:54:a4:
         e0:d9:17:d1:d4:ff:f4:97:ba:3b:16:fe:91:df:e2:a8:d8:6e:
         64:e9:a4:24:cf:a8:a5:1d:8f:95:a0:00:42:bb:02:5d:6f:3c:
         10:95:96:62:e9:7c:6e:16:04:7e:02:47:60:3d:3b:c1:03:2c:
         10:a9:8b:36:47:07:a9:60:3e:05:fc:77:87:73:b0:5f:81:75:
         d7:ab:d0:74:94:85:18:72:fb:2c:df:4f:b6:a7:c9:ae:e1:83:
         cd:2e:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:46 2025 by rpki-client