Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa
File:                     f8aad428-213d-3fe9-9c9d-407be46c12b8.roa (raw, json)
Hash identifier:          6rTTHUByRTD+eNix3q2BbIOxtdvhPcFHkn0cyGIRczU=
Subject key identifier:   84:46:4F:C6:8A:22:53:98:E6:D0:BC:EE:2F:28:2A:DF:9F:8A:0E:1B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710FB9F432E3C09C56B35C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     19955
IP address blocks:        72.10.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:fb:9f:43:2e:3c:09:c5:6b:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=efad4a04-97e2-4888-9c1d-2cea10fadd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:c0:1b:a9:fc:33:c1:ce:6d:3f:67:a4:72:
                    e3:ce:e8:d9:f4:8a:ec:60:80:f9:17:57:b4:44:bd:
                    26:8c:4b:e1:41:ff:50:1e:35:66:78:c8:35:96:9c:
                    53:ac:71:c7:18:f1:e2:d1:f4:14:f6:fa:47:e9:a3:
                    be:b6:d3:47:f1:45:54:f3:ee:93:df:b2:33:94:ea:
                    f7:46:c1:55:50:39:e2:28:dc:53:ff:36:1f:f7:c1:
                    b8:2f:7d:83:0e:07:84:a4:23:ca:49:51:8c:d8:a0:
                    c2:ed:ab:d6:00:c9:4e:fe:32:75:2c:32:5f:a2:9f:
                    75:ff:cb:d8:d3:30:c6:ba:d3:39:17:d2:a9:bb:22:
                    68:50:6c:1f:1b:bb:d2:22:f9:c4:c8:44:84:9f:9b:
                    bf:21:56:f5:22:54:25:92:86:f5:35:1d:9d:0f:00:
                    55:c3:33:8f:6b:90:3d:c3:16:70:ed:c8:3b:f2:b2:
                    13:ce:ed:2a:cd:3a:59:29:af:48:08:d4:23:e5:73:
                    1e:c8:15:5f:46:7e:80:46:b7:af:fd:68:35:b9:02:
                    2d:3e:7e:28:c5:4a:5f:c1:1c:9e:fb:e0:0c:a6:f0:
                    9f:fa:1a:60:71:72:87:ac:d8:ad:66:a0:0f:5f:58:
                    25:db:28:5d:d6:f4:9c:89:64:5d:64:c5:5c:3f:7a:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:4F:C6:8A:22:53:98:E6:D0:BC:EE:2F:28:2A:DF:9F:8A:0E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:55:22:ca:12:59:19:b7:b6:cd:70:c4:7d:10:4c:2d:2e:
         34:bd:0e:d3:93:64:5f:ce:f5:c4:67:8c:f6:1d:76:e4:54:bb:
         4b:e8:ff:e6:9c:67:37:fb:df:cd:76:2d:80:aa:b2:7c:98:18:
         a7:ae:d4:cb:86:4d:e5:fb:1d:74:c1:2c:28:f7:b5:bd:fc:9e:
         6c:b1:12:6c:9a:fe:48:17:1b:1d:b6:8f:83:4f:ee:fb:59:6c:
         26:3b:75:d2:6f:3e:65:aa:1f:6a:17:72:69:f9:6c:70:25:66:
         c6:a8:da:90:88:8a:e2:69:b3:18:54:ec:62:14:08:2b:b9:64:
         a1:44:b0:12:fa:59:f9:86:ea:2c:df:bf:5d:a6:c6:de:31:1a:
         38:65:b9:2a:84:4b:6b:16:09:b0:49:1e:c7:01:60:7f:bb:10:
         6e:c7:18:2b:b1:6e:cf:56:ed:3e:94:5e:27:0d:9e:4b:28:9d:
         c2:b4:3d:93:b9:c7:ab:a8:40:59:d4:9b:61:49:04:20:73:4f:
         2c:64:b6:53:25:a8:a9:f6:14:79:8a:2a:e5:43:49:5f:3c:20:
         c2:45:1d:a3:da:c8:b3:e5:12:0d:02:65:01:e5:64:07:50:29:
         0e:e0:cc:07:72:5b:69:52:7f:70:39:58:3e:a4:46:5f:67:66:
         18:a3:7c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:50 2025 by rpki-client