Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
File:                     665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa (raw, json)
Hash identifier:          1PfLHVz/Astu65Dkq1/9I//jKnhvLrFn4YL9sCN2Upg=
Subject key identifier:   AD:AF:6C:F3:BF:91:1A:AB:F8:84:EA:90:48:F8:B0:5F:82:40:1F:F3
Certificate issuer:       /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial:       010D0C9F4328584B28C6DADD6C3393ED3C45B900
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     398041
IP address blocks:        67.226.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:da:dd:6c:33:93:ed:3c:45:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=b159574b-a1bd-4406-85a9-41c13ba50d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:ed:3f:d9:db:fa:d4:5e:2e:30:4c:69:4e:
                    bd:53:80:d3:68:7d:b7:19:6b:c7:0e:b0:0f:d5:cf:
                    ce:94:cb:a1:68:82:eb:98:32:f6:af:7f:df:57:f7:
                    11:48:52:9e:1c:68:ad:2d:43:86:52:67:f7:64:86:
                    8b:db:68:18:ba:9d:6c:09:70:b4:a5:86:7a:35:9b:
                    d0:13:d5:6f:c8:41:cb:a7:47:1d:b9:b3:4a:b6:6f:
                    a8:ee:51:f4:33:a5:50:24:0f:58:c1:c0:16:eb:cc:
                    ea:11:14:0d:df:d9:79:16:f9:de:29:01:88:3e:1e:
                    82:1f:dc:be:37:9c:e3:97:bd:e4:eb:28:1f:e5:dd:
                    ba:98:e4:19:65:07:c1:23:6f:90:38:ca:bf:f4:bc:
                    6d:d0:9e:77:61:95:a3:83:e6:e0:42:12:bf:fe:93:
                    83:4c:88:e1:95:08:2b:19:1e:ca:e5:2b:e7:8a:b4:
                    bd:35:36:fe:9a:88:b6:67:9d:9a:94:ed:4a:29:9b:
                    9e:8f:ee:d6:86:88:e4:d4:ac:d9:58:8c:0d:73:7b:
                    58:18:64:27:21:9a:3f:57:09:a5:e3:95:53:d0:c3:
                    ec:8f:bd:51:43:53:54:90:3e:82:b8:93:43:01:26:
                    4d:fa:cc:23:88:b8:bd:a9:00:4d:01:f5:61:44:ef:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:6C:F3:BF:91:1A:AB:F8:84:EA:90:48:F8:B0:5F:82:40:1F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl

            X509v3 Authority Key Identifier:
                keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:49:51:8b:14:58:d1:77:70:4f:63:30:6c:56:e6:d0:2a:5f:
         9f:c7:5d:c2:05:4c:a3:ff:73:9d:f4:fa:77:38:09:99:b4:b9:
         1e:f5:d5:32:f1:6c:6e:81:c4:a5:25:54:01:a3:a1:5f:99:11:
         d9:72:ab:a3:af:46:de:fa:d3:a0:36:ef:9f:65:22:00:ad:65:
         19:bc:68:eb:15:42:9d:a6:05:97:aa:41:66:3c:23:7d:2f:c2:
         09:c5:d3:56:07:27:44:69:47:8b:96:1e:9e:13:1c:b4:59:cb:
         fe:ed:8b:d1:15:0d:e3:b4:ca:45:46:8e:b6:91:3e:75:5b:32:
         37:42:eb:c6:94:85:2a:07:39:04:f6:c1:c9:e8:49:ff:59:25:
         7b:06:71:ac:bf:44:4a:9e:3f:39:ee:df:0e:49:b4:0d:59:93:
         b7:c0:ad:cc:f5:fa:dd:b7:09:f5:5a:75:26:96:35:a3:a1:5b:
         f8:ab:05:b2:a4:3c:c0:06:89:47:05:94:b4:d5:b4:53:7f:a7:
         f3:15:96:ed:b0:47:c5:50:51:89:84:16:e8:9e:2e:47:09:61:
         08:f2:55:bd:89:f5:38:24:6b:f1:ad:47:34:2d:1d:7b:e2:46:
         05:43:77:26:11:e0:82:17:66:db:2f:95:e2:dd:12:10:62:d5:
         c0:de:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:51:42 2025 by rpki-client