Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa
File:                     605cb406-8c49-3399-99e1-f5dd8da59193.roa (raw, json)
Hash identifier:          EVf3+bG+j001i/JopiKvzqwsdJPVMqcnh/Ogtay2nng=
Subject key identifier:   FB:E0:52:47:26:B1:C1:F9:AD:D5:1E:E3:08:8D:39:BF:DB:B7:62:DB
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584AF2567628CFDE2CDAA2830F40
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:76:28:cf:de:2c:da:a2:83:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=fd4429f0-71d3-44b2-885a-9c6aee4fcd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:35:69:d4:d3:c9:db:a1:2f:73:84:34:35:
                    da:ae:49:f8:b9:e5:62:d5:9f:57:c8:fd:13:e7:52:
                    9f:cf:45:ee:e2:5d:64:0c:f5:69:71:d5:83:cd:a8:
                    17:92:82:97:fc:a3:9e:49:c1:14:17:2e:56:dd:90:
                    f4:9d:22:f9:ca:6f:cd:72:c2:7b:79:3e:f3:6c:72:
                    f8:6b:42:ca:ed:5c:6a:e5:1c:6f:8a:43:ee:0c:4c:
                    8c:1a:f9:e9:7c:be:e1:a0:98:e2:19:72:e3:e0:3a:
                    21:7b:07:19:36:b7:de:87:58:0b:68:d4:45:0f:21:
                    96:dc:e9:a6:c4:44:a6:0f:8e:53:e5:05:a8:4f:69:
                    ec:fb:7a:d0:d4:67:2c:01:a3:cd:af:d2:e6:6a:51:
                    0c:81:58:c8:bd:24:c5:d5:5d:15:70:fe:af:7c:c8:
                    ee:59:e8:e0:58:3b:d7:26:3e:b5:1d:da:8f:2e:0f:
                    3f:6c:d5:a9:45:95:0a:75:76:9a:f0:c7:e7:ac:36:
                    be:4a:4b:c9:90:cf:21:c9:dc:26:59:51:c4:1a:31:
                    b2:32:79:13:1c:77:6d:3c:54:c7:97:55:f8:fc:8f:
                    db:bf:97:06:68:7a:a8:ff:65:19:6f:10:1f:6c:d2:
                    58:d3:4a:b0:4e:36:1a:74:cd:d9:d8:5a:51:ad:2a:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E0:52:47:26:B1:C1:F9:AD:D5:1E:E3:08:8D:39:BF:DB:B7:62:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:1a:cd:a2:71:84:b3:75:3e:1d:89:fe:ab:d6:e8:9a:90:
         12:9c:1d:f5:fa:c4:c4:66:0e:32:66:92:57:06:57:5d:e6:98:
         df:db:2c:34:67:bb:32:8d:a2:b1:84:e5:ed:09:e9:c9:19:e6:
         e1:6e:e0:31:1d:d3:0b:f0:23:be:ec:f1:a6:2c:bd:b2:b0:86:
         9b:a6:af:19:ac:4b:3c:c9:cc:2d:55:fb:02:dc:fc:2d:b1:01:
         be:82:a2:7b:7b:17:64:0d:cb:84:c1:ad:e4:94:7f:8d:6e:3b:
         e0:b6:7a:67:49:ba:d2:b6:38:96:ac:89:2a:cf:7e:ef:46:72:
         97:f6:ae:e8:1e:22:a0:9e:45:44:63:c5:11:28:14:38:5e:8d:
         55:20:87:8c:cf:a0:99:f4:d9:5e:88:36:86:ce:01:8f:43:4a:
         b7:fb:ef:16:cf:66:45:04:7c:45:c4:7b:bc:7f:af:dc:dd:8b:
         de:c7:e6:4d:97:03:bf:af:01:f4:40:55:fa:9c:45:4d:ee:66:
         a9:99:bd:75:15:af:6d:3c:46:8e:6f:bb:58:f2:be:d2:bb:68:
         19:8e:03:e5:f7:8c:a8:db:6c:a0:af:ec:f0:e7:a1:0d:4c:e2:
         28:a7:16:f5:36:58:29:b1:c1:b9:08:5e:b6:15:3d:38:e1:07:
         5f:1f:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:26 2025 by rpki-client