Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa
File:                     7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa (raw, json)
Hash identifier:          htyk8Yw9j7XfeZAQPGJCGozrn7alsPz1ASFphBDPEvg=
Subject key identifier:   CE:AB:A2:90:9A:89:2B:15:2A:FF:F3:AF:EC:97:82:43:3F:EF:97:D4
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584AC2E10658EE51E76D4CE14640
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     395425
IP address blocks:        72.42.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:06:58:ee:51:e7:6d:4c:e1:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=df452d45-0f1a-4263-869f-7393dacf45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:4a:1b:cf:ac:7d:d4:72:f7:57:ba:7e:54:
                    39:b8:3b:78:dd:13:3e:48:87:6c:71:fb:45:81:d0:
                    fa:4f:fa:32:bb:78:55:10:92:07:13:26:7e:f4:8c:
                    a7:fc:1b:e5:0f:31:42:a7:0b:a4:f5:29:5b:99:f1:
                    84:10:91:ec:67:9a:f4:90:71:ed:18:c5:87:46:cd:
                    28:33:d0:70:53:9b:eb:dc:39:de:b3:62:d9:eb:81:
                    3c:ca:51:ec:bb:03:cf:c9:95:60:27:14:32:4c:5a:
                    42:2d:66:b2:a4:b9:e2:cd:92:95:0f:03:a2:f4:3d:
                    41:2d:06:2a:ae:00:b0:d6:83:04:46:47:29:85:df:
                    31:bd:1a:33:02:bf:e1:1d:fe:d6:31:ad:49:57:2f:
                    5f:bf:95:2e:d6:dc:c0:9a:af:8a:45:24:80:61:85:
                    62:44:cf:7f:0d:5f:a7:bf:7f:82:c1:d3:70:ef:cb:
                    f2:49:48:74:25:91:53:01:b2:0b:cd:49:68:33:62:
                    38:32:96:6d:f4:13:df:a8:a7:71:97:0f:e2:8d:26:
                    3b:ad:c5:89:e1:60:b6:44:1e:3c:f5:fd:b2:7e:ae:
                    42:49:9f:ec:5b:df:f1:05:6b:54:63:79:5d:1b:7c:
                    ea:69:c3:15:ce:e5:9d:6c:8b:bd:e0:b2:96:8e:c6:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:A2:90:9A:89:2B:15:2A:FF:F3:AF:EC:97:82:43:3F:EF:97:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/7830e1c4-4f1b-3b13-9ab1-889c491a0ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:2f:f9:2d:04:5b:c5:3b:ae:8c:fe:78:15:ea:d6:c7:9a:
         9a:8e:4d:4e:34:c8:07:35:d3:53:db:fe:f9:2a:bc:06:cf:34:
         9f:cc:83:56:4a:e0:33:f9:de:da:82:0f:b5:73:52:9a:ba:6a:
         de:3e:80:ba:e7:2d:a3:bd:a5:6c:12:fb:28:3e:42:5d:ef:3e:
         bb:a9:f1:a1:ae:e9:8b:f6:d3:96:b5:0f:38:10:b7:19:f1:b6:
         1b:97:0f:d5:ea:da:3e:7d:03:87:c8:22:08:15:73:c1:30:ba:
         81:40:1a:21:f7:9d:37:a1:b8:8f:81:4d:44:83:f2:e9:61:0b:
         10:76:5b:c1:dc:98:f6:f6:5e:ee:66:ec:8c:bd:f9:24:a3:96:
         59:21:f1:7f:a6:de:62:6c:51:da:de:c5:05:de:13:a3:1e:27:
         25:61:0c:93:74:ee:d6:3c:2e:e0:c6:07:e8:7a:22:ef:ea:45:
         20:72:21:5b:76:3c:9c:b0:ca:29:d3:0d:3d:0d:6c:d8:54:e5:
         c0:2c:16:45:85:ab:4c:9c:de:2d:7c:2e:c7:e3:f0:35:2f:a7:
         99:2f:2a:3d:ee:24:2b:19:be:7e:41:e0:d6:b9:6c:72:57:6d:
         2d:32:9a:e7:bd:3d:6d:0e:ac:43:c0:66:cf:66:4e:d9:e8:6f:
         40:66:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:38 2025 by rpki-client