Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa
File:                     b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa (raw, json)
Hash identifier:          nmnwRKRkX3GwzsRMnmmUywGJ3nTCj08cs6Mn1lsvOBE=
Subject key identifier:   02:2B:C8:FD:B1:C0:F4:EF:F0:93:09:28:A1:CA:0B:D2:3A:77:9D:E0
Certificate issuer:       /CN=8e134cc5-1e78-4920-b929-62214080c938
Certificate serial:       010D0C9F4328584ADD6682DF3A9E49EBA68C5080
Authority key identifier: 42:A6:F6:E5:AA:AA:D5:B2:75:45:5F:2F:D7:FF:BB:CF:91:E0:91:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     903
IP address blocks:        209.112.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:82:df:3a:9e:49:eb:a6:8c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e134cc5-1e78-4920-b929-62214080c938
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=afe66632-2a94-464c-80b5-17f900ad7f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:74:53:5b:17:59:d8:1c:ad:8d:1a:76:e1:
                    e6:be:24:d0:a2:a6:01:8a:94:23:cb:c2:e5:98:0a:
                    35:87:1b:b1:86:6d:06:73:f4:9a:bc:bb:3a:6d:f9:
                    9c:be:d8:ba:50:e2:ef:b1:0e:dc:80:78:ba:c9:2d:
                    8f:cd:05:96:73:84:ae:1f:0a:e2:a1:11:62:99:23:
                    f5:38:2e:4e:ad:a5:f4:c5:67:86:d8:1c:bd:9c:33:
                    c5:ec:de:dd:25:b6:bc:ce:9a:76:44:d3:f4:35:f0:
                    04:55:e1:07:c6:70:23:af:9c:b8:d0:ca:8d:90:e1:
                    64:72:71:9d:84:c8:9e:6b:77:52:c8:ef:14:24:5b:
                    ed:ac:2d:3f:45:fe:c3:3f:38:27:ba:fe:c8:c6:96:
                    bb:93:80:d5:90:05:2b:bb:c6:eb:8f:1b:fb:ae:9f:
                    44:cf:bf:47:56:fb:25:8a:9b:fd:e2:b8:98:e0:f0:
                    bc:50:e0:4d:7a:ce:87:9f:67:dc:3b:fd:2a:ea:c6:
                    0c:bb:40:86:cf:08:c8:b0:95:17:47:ae:04:8c:a9:
                    56:55:43:89:9e:e4:99:e1:96:2e:fc:e5:ec:50:b4:
                    00:6f:b6:94:50:f7:82:c3:cf:07:ac:8d:6f:7f:ba:
                    5c:15:6f:13:d6:5d:92:0f:1c:66:b8:51:2d:21:28:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:C8:FD:B1:C0:F4:EF:F0:93:09:28:A1:CA:0B:D2:3A:77:9D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.crl

            X509v3 Authority Key Identifier:
                keyid:42:A6:F6:E5:AA:AA:D5:B2:75:45:5F:2F:D7:FF:BB:CF:91:E0:91:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:66:94:fb:26:2f:d1:f3:fd:f9:37:8e:55:4a:1d:ce:e0:b4:
         ae:58:ff:00:a7:50:67:0c:48:54:ce:0c:41:4f:7f:5c:16:e0:
         a1:5b:31:18:11:95:0d:1b:e1:85:25:e8:2a:84:a4:3a:53:27:
         e0:ce:c5:bd:f8:73:0b:e3:54:2c:d9:fa:a9:aa:65:9e:69:d5:
         a3:cb:1c:02:35:eb:60:97:b1:45:12:a8:06:ae:cd:c8:6f:df:
         b9:a7:96:90:86:37:66:54:51:a7:4d:6a:a9:87:46:91:8d:d2:
         db:6f:69:e1:ce:40:da:11:bb:06:a9:66:c0:ea:6a:0a:d0:1d:
         d7:41:72:27:77:8d:9c:f8:3e:59:87:a8:a9:7e:5a:5a:3b:7a:
         37:d6:d6:e5:11:dd:0f:ef:16:6f:c2:8a:8f:de:d4:ad:bb:5f:
         9d:a6:60:df:af:d6:a0:50:5e:27:2d:07:cb:69:1e:32:16:24:
         2d:13:aa:0e:e9:13:ce:a1:4c:c6:26:54:f8:7e:ae:32:46:af:
         d2:0d:02:3c:1d:93:1a:73:d0:02:9b:ae:cd:c1:7a:78:77:c0:
         d7:88:bb:a2:a5:57:3f:29:b6:17:13:95:91:d6:fc:04:54:b7:
         1a:b6:01:d8:79:c9:b4:ae:63:0e:e4:15:82:5b:4e:1d:e9:1b:
         5d:87:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:47 2025 by rpki-client