Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
File:                     a02237c8-ae50-3044-82bb-f2b03181c5b1.roa (raw, json)
Hash identifier:          Gu/rfYYKrvXtsFbAmmsZhh8NWW0gYt9evRiqs4PjvD0=
Subject key identifier:   94:A0:18:97:84:BC:E7:7E:14:B8:9D:68:44:9E:EA:36:B7:44:53:69
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584AF0F13F79736867893D6A44E8
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     22192
IP address blocks:        2607:2240:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:3f:79:73:68:67:89:3d:6a:44:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=13c8b6b9-5bc7-426d-b7a9-86cc74a741ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:b2:b3:64:cc:45:9e:a9:fd:c1:3f:17:b7:
                    d8:11:73:be:75:d3:c6:00:00:c6:29:09:da:ee:95:
                    d8:b3:28:39:ed:4d:5c:21:d5:ce:bd:1c:78:6c:3a:
                    9e:a9:ac:06:4d:1e:d3:59:1c:7a:0c:b4:df:6d:15:
                    63:69:5b:fe:ec:70:9d:8a:c8:d2:cf:75:de:69:7d:
                    34:20:49:46:41:e5:66:50:21:a5:ac:b7:95:9f:b7:
                    62:b9:e4:97:63:d5:ff:37:3b:96:68:8c:fe:2f:28:
                    a3:ed:84:22:00:64:b0:73:95:08:b8:20:a3:31:b0:
                    3a:dc:ef:81:74:cf:d9:2c:e0:9c:79:0f:40:f7:09:
                    48:80:24:3f:1d:f2:95:a2:df:8f:d0:f1:19:5e:73:
                    31:2f:36:fe:49:10:21:0b:0c:51:13:a4:50:75:b2:
                    95:80:62:94:21:11:db:f6:b6:88:41:d7:a7:dc:1d:
                    5a:4e:a7:2f:3a:a1:b6:3f:e0:92:c8:30:f0:5b:50:
                    7e:b9:64:54:22:9e:15:6f:41:bd:4d:36:c8:68:21:
                    c5:02:77:2e:48:25:f5:b5:b0:5d:b8:53:2a:0d:21:
                    75:1a:94:24:f4:18:9f:58:91:dc:e6:e0:cc:d9:18:
                    8c:a2:0a:ba:65:d8:7a:70:9b:86:db:51:e3:8f:92:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A0:18:97:84:BC:E7:7E:14:B8:9D:68:44:9E:EA:36:B7:44:53:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:3f:38:af:35:7a:8c:47:9c:53:59:1f:e0:4f:b3:d3:9b:
         79:e5:7c:53:58:ac:4f:27:51:22:25:c4:b8:8c:84:fa:30:e3:
         9f:ab:6c:a7:b8:b6:c3:90:3e:42:3d:a9:77:bf:6d:90:97:01:
         55:01:b0:ed:ac:24:b1:54:da:1d:fd:d7:18:0b:63:8b:44:2f:
         98:68:d2:53:b0:b4:64:68:25:08:aa:84:a4:94:7e:2f:f9:2e:
         87:8c:8a:92:3d:8f:a7:a6:d3:4f:c9:51:3d:4b:70:e4:d6:7e:
         5f:cd:a8:50:3d:52:08:e8:d4:c3:0d:04:12:e7:89:37:85:7a:
         ae:82:56:83:3d:ea:f3:77:b8:b5:ee:9a:9f:f9:f8:41:7f:d5:
         54:14:34:de:0d:67:a1:33:dc:d3:b3:4a:c6:46:1f:50:76:83:
         2a:1e:f7:cf:36:9c:14:82:a9:ac:fc:a9:06:dd:4b:fb:e8:36:
         70:b8:df:e0:79:67:53:61:11:6a:34:0b:c3:e6:b9:e7:db:05:
         3f:a8:40:21:9f:1e:21:af:e9:bc:e9:3d:21:d9:f9:f3:7f:ea:
         c2:ec:0c:49:0f:37:32:f2:c3:9f:55:c9:30:13:a7:3f:0a:98:
         4d:44:2d:a4:ef:e2:d8:e5:a9:28:87:21:ff:b3:b9:1c:dc:67:
         2a:af:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:11 2025 by rpki-client