Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
File:                     4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa (raw, json)
Hash identifier:          uCf9zurAGFP3aXc9b3i/14zWC4twzTOTc4Pf7e9KPVM=
Subject key identifier:   3D:1C:DF:6C:D8:BD:A0:38:33:5A:06:F8:AC:FB:2B:E2:4A:CF:2C:C5
Certificate issuer:       /CN=0215b589-0229-401c-98ef-53194fd5e2a5
Certificate serial:       010D0C9F4328584AD3A115CE041E981E178AB760
Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     46294
IP address blocks:        104.255.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:15:ce:04:1e:98:1e:17:8a:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=53ea6ba3-f8b0-42ee-85fd-8d46198551c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:02:a4:b6:49:e6:92:86:c9:92:c3:1d:25:
                    62:52:d7:53:12:2b:67:8c:4f:99:92:95:93:36:45:
                    86:7a:2b:ea:a0:1b:db:21:56:63:e0:b7:9c:60:60:
                    f9:aa:68:76:8e:db:ba:4a:ec:0c:1c:60:03:a4:7e:
                    7a:d6:98:ee:e5:3a:0e:d7:f5:f3:a9:af:70:a7:64:
                    73:bc:0e:db:ba:14:51:84:64:1e:c4:3e:12:fa:b8:
                    7d:eb:7c:43:1a:a5:c5:0d:2b:f4:c1:88:91:ff:9d:
                    6e:8e:7b:b8:32:c1:ba:8d:1e:60:9f:23:14:48:5a:
                    a1:44:ab:ce:b1:c4:77:42:2f:f0:c0:fa:44:d9:6b:
                    89:0a:ac:58:ce:80:79:ff:a8:3e:03:9c:fd:d3:bd:
                    f1:0e:69:bf:e1:87:ef:f0:40:0a:63:3e:e9:43:8e:
                    87:d8:1b:21:85:e1:fe:72:20:e5:66:3e:9b:e6:bc:
                    e5:3c:c7:ad:a4:cf:e3:54:4f:55:16:b9:2d:27:1f:
                    17:7d:7f:61:d9:7c:2b:8a:bb:c8:0d:1f:66:b4:71:
                    62:d4:eb:ac:e5:de:2e:14:a3:8c:1c:71:1e:66:ac:
                    d7:87:15:ae:fe:42:bc:60:e5:45:28:5c:7c:25:53:
                    24:0a:98:c4:8c:6a:c2:42:96:2f:ff:02:2d:e8:35:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:DF:6C:D8:BD:A0:38:33:5A:06:F8:AC:FB:2B:E2:4A:CF:2C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:52:55:00:a8:60:69:73:d9:4c:06:9e:d9:e2:aa:39:0f:
         c8:b7:7f:2c:f4:23:50:c9:83:76:c1:2f:c4:a6:c2:2c:7f:66:
         3b:71:b6:db:cd:83:3c:40:38:a9:33:c2:84:2a:47:ad:9c:84:
         02:ca:eb:47:02:ce:4a:19:b5:5d:b7:3a:07:55:f5:09:df:62:
         3d:66:97:43:5f:b6:23:8e:46:23:fb:c3:dc:d4:fd:45:06:b4:
         4f:e3:af:cd:f1:98:e8:9a:f8:66:66:5d:06:eb:f5:96:54:c1:
         6d:c9:8c:77:ab:fc:59:11:b2:60:4b:78:d4:05:3a:4e:85:c5:
         b9:2c:4e:ef:2f:0a:3e:dd:bf:3a:69:00:46:32:78:8d:24:ab:
         80:72:92:0c:57:a0:d1:48:92:71:ea:8f:f4:68:f7:fe:14:29:
         02:38:69:d3:e4:2b:98:2b:8c:53:7a:a4:23:07:6c:e1:35:63:
         a3:a6:f0:22:ba:8e:81:21:58:64:5b:95:e5:eb:31:ee:23:d6:
         23:c9:75:fa:f8:02:b6:10:9b:d9:a9:70:44:f0:9b:ed:0e:84:
         a8:9c:da:72:73:0e:8b:a5:2e:5a:6a:5c:bd:80:40:f6:02:3f:
         66:51:ca:12:6f:bc:8d:1e:24:bd:86:0f:ae:7b:5c:6d:44:a3:
         f4:74:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:37 2025 by rpki-client