Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa
File:                     d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa (raw, json)
Hash identifier:          ExDSOCBDTKMvJ/S9DfoErEF/kVbT08bxqyHdIEDG9fI=
Subject key identifier:   07:95:CF:99:E3:43:71:DC:64:94:6C:C8:D6:8D:85:DE:E5:4C:15:F7
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584AC8765C867C2D011BC16B3580
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     270856
IP address blocks:        169.145.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5c:86:7c:2d:01:1b:c1:6b:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=1163f723-59ef-48c7-8f85-c47fed8b3f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:c2:b5:89:39:7b:dc:44:b3:48:b4:e4:94:
                    ce:bc:f9:f6:0b:bc:bc:d7:9a:99:f6:7e:fc:f6:17:
                    9e:81:22:61:99:a1:91:11:42:61:3a:0a:fc:dc:42:
                    6e:a5:da:43:b7:ee:13:8c:43:79:7e:75:2a:1d:03:
                    47:13:f6:a6:cf:51:86:b1:ed:a3:d1:4b:08:c5:c3:
                    c5:e1:db:da:3f:78:08:aa:75:4a:db:9a:36:39:2e:
                    ac:f0:3d:f5:04:83:c0:bf:4b:e8:18:ad:2a:c4:9c:
                    55:1c:88:86:b4:07:39:dc:84:81:7f:83:73:2e:12:
                    f9:d3:dd:ba:f5:d4:6c:9e:bf:c9:3d:cf:ce:9b:ff:
                    96:a1:18:76:00:bf:77:20:0a:75:40:b1:7c:6d:e9:
                    81:65:f4:1a:b4:01:4a:ec:3e:c0:15:4d:63:00:b8:
                    ff:48:b3:4b:ef:ef:ad:5b:0e:ab:5c:e5:d2:f3:94:
                    df:6e:4d:53:7f:93:36:4a:da:01:4e:ff:68:ae:85:
                    21:e2:ed:4e:0d:a1:d4:0d:23:4b:ea:7f:54:2c:8d:
                    98:81:20:57:42:b2:1b:8a:3d:1b:cd:92:b0:bd:1e:
                    70:d7:9a:99:6b:c5:92:1a:54:5e:32:85:76:85:1a:
                    e5:72:5a:00:50:92:4d:80:4f:15:ba:19:a4:ec:1a:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:CF:99:E3:43:71:DC:64:94:6C:C8:D6:8D:85:DE:E5:4C:15:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fa:fd:f1:41:8a:c7:df:f0:e4:0e:34:9c:c7:08:37:03:be:
         96:12:31:e6:8d:fb:a9:8f:02:1e:06:73:4b:49:07:80:bc:d3:
         2d:92:53:c3:1c:8a:8d:cd:8f:60:c4:c9:c4:61:8d:57:d4:ee:
         55:f5:31:04:44:55:c6:fd:50:b1:99:57:e1:74:e5:6a:fc:13:
         f9:12:5e:18:75:53:d8:e7:ce:10:e8:e6:41:16:c2:d8:7d:41:
         5e:ab:17:9e:03:9f:c0:d2:ca:0b:18:d5:8d:5f:92:38:4d:cd:
         51:3e:8b:bb:40:e7:b9:cd:4f:9d:6a:44:00:a6:14:e9:af:e8:
         19:75:fe:c8:95:1c:45:9e:99:97:86:9c:2b:fc:4f:ac:19:aa:
         11:95:9a:2e:38:14:af:b6:22:47:32:2b:2a:44:56:86:4d:e7:
         23:90:29:d7:d1:b7:2d:a6:c5:38:fe:de:ef:ac:01:42:53:e2:
         b6:54:c2:26:2a:d0:cd:c2:51:fc:30:f4:0b:c4:ef:09:a2:7d:
         50:9f:13:37:03:df:c7:0b:53:59:9c:ff:77:73:1f:35:aa:7a:
         b3:f0:20:0b:56:9b:94:ac:59:39:7a:02:dc:83:d1:73:5b:24:
         06:60:5a:f8:f8:57:20:c8:b0:3f:26:99:c5:c8:3f:ab:d8:91:
         d8:c6:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:28 2025 by rpki-client