Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/bd153ff1-3b77-343c-8a91-1457b69af07c.roa
File:                     bd153ff1-3b77-343c-8a91-1457b69af07c.roa (raw, json)
Hash identifier:          i/OBNgyZ+wSjsztLb3LVi3HgWgeorpX9gChvtcTtkOs=
Subject key identifier:   3C:01:95:D9:02:4B:63:D3:93:01:64:05:E3:63:C8:55:00:D8:CA:7E
Certificate issuer:       /CN=5c644008-56e0-45e0-a9ef-9dc182e137c0
Certificate serial:       010D0C9F4328584AF0F138EDD02D2C4169665F94
Authority key identifier: 6D:0A:A9:EC:65:D5:A0:D9:F0:0E:B1:28:42:B0:11:93:13:20:11:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/bd153ff1-3b77-343c-8a91-1457b69af07c.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     62809
IP address blocks:        45.42.208.0/22 maxlen: 24
                          136.175.28.0/22 maxlen: 24
                          204.13.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:38:ed:d0:2d:2c:41:69:66:5f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c644008-56e0-45e0-a9ef-9dc182e137c0
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=cc9f7ea5-e5e2-4bb5-88ca-537d5b61d109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:cd:38:eb:f3:fe:9c:8b:da:8e:3e:f2:7d:
                    8a:91:e2:15:a5:71:3a:0a:99:15:6d:f1:45:31:af:
                    9f:82:67:fa:21:f8:d0:2d:1e:80:5b:b9:0b:d7:d1:
                    26:9c:53:69:35:a8:fd:5a:da:0e:d5:24:55:32:ad:
                    de:35:d4:bd:8a:a7:2d:36:59:dd:06:40:66:07:31:
                    73:57:09:97:2e:90:7c:82:cc:1d:48:50:1f:f3:7b:
                    cd:1d:ad:ba:d0:60:62:83:60:6d:8c:f3:c4:07:3c:
                    d9:1c:b1:7f:c8:d3:9a:be:69:20:9d:51:90:66:e0:
                    3a:ee:14:91:ee:d3:18:87:04:4b:ee:d9:b3:1a:9f:
                    1d:93:01:86:9a:ef:43:79:e2:47:4e:4b:77:46:e1:
                    20:e7:ed:bf:7f:47:e9:f0:21:28:a9:b2:ff:f0:21:
                    b7:2a:38:fb:dc:a7:f0:03:c1:89:e1:bf:d8:5e:76:
                    f6:63:c8:e8:94:76:32:db:df:5a:12:2b:55:7c:95:
                    c5:91:17:c4:11:2f:4d:33:c3:2f:63:1c:f4:67:15:
                    9e:4e:7d:30:4f:2b:6e:b5:11:c4:71:cd:f8:a6:45:
                    dc:53:f7:3d:36:72:59:fd:62:46:2b:9a:00:22:55:
                    e3:3e:53:89:86:76:c6:77:80:a5:05:fd:a6:e5:88:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:01:95:D9:02:4B:63:D3:93:01:64:05:E3:63:C8:55:00:D8:CA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/bd153ff1-3b77-343c-8a91-1457b69af07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.crl

            X509v3 Authority Key Identifier:
                keyid:6D:0A:A9:EC:65:D5:A0:D9:F0:0E:B1:28:42:B0:11:93:13:20:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.208.0/22
                  136.175.28.0/22
                  204.13.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:a7:a3:d3:35:10:e5:2c:00:89:0b:77:d3:54:6b:21:d7:
         fe:25:e0:7c:92:53:83:df:98:3c:b8:c8:08:fc:5c:31:72:f4:
         96:63:15:f5:f3:0d:91:3a:34:90:27:79:3c:81:56:26:0e:8e:
         c2:d6:45:08:fe:23:0b:84:6c:58:eb:6e:29:61:71:32:66:10:
         4d:e0:8b:a4:b6:b1:50:f3:ac:df:fa:43:f9:f9:40:3e:15:d4:
         15:1b:2e:5f:31:ff:b8:5e:45:17:0f:ba:7c:b7:3c:42:70:37:
         3f:53:1e:16:be:e1:14:e6:c1:84:1a:38:9a:31:04:b3:13:18:
         b7:4e:b3:e8:fa:de:1f:d9:7e:0e:ab:31:e9:16:b0:6a:f8:7b:
         ab:4a:38:79:38:50:2f:53:53:67:34:db:8d:c3:f6:8e:71:73:
         f8:8c:32:ab:05:29:31:f5:a0:37:95:7d:d8:9b:1a:1c:18:68:
         bb:68:52:f4:e6:a2:28:81:71:a0:20:32:3b:ee:46:44:84:3c:
         27:6f:bb:c5:99:35:8e:72:bd:05:e8:77:4c:60:39:0c:b3:30:
         43:85:59:4e:06:c4:8d:41:47:b6:13:7b:7c:ee:a7:6a:47:23:
         be:7f:86:b1:e2:f9:9d:8c:e8:fb:3d:43:b1:f0:4a:e6:35:9f:
         8e:37:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:27 2025 by rpki-client