Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
File:                     8c882cc2-406d-3017-8300-39c36de0cee6.roa (raw, json)
Hash identifier:          A9nBJVfxiViOgOJL8BG9ZZ5OCbnAl1R52J5rlVnpTW4=
Subject key identifier:   18:57:88:E7:27:F2:E9:9C:DE:35:F3:47:7A:38:6F:3A:E4:14:69:02
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584ADA9BD068E0EFE1FF99988200
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        136.22.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d0:68:e0:ef:e1:ff:99:98:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=641485fc-38ed-42a7-8d77-16e17aa5b836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:69:b6:27:a0:df:d5:0b:d6:3a:5a:bb:d1:
                    3e:5b:8f:7a:71:6e:54:77:14:60:be:47:ac:42:7c:
                    a1:12:07:69:55:a4:0a:a5:b9:16:f5:61:5d:29:3a:
                    75:f6:63:e6:fa:5f:8f:9c:9e:a0:5b:fd:ef:28:30:
                    93:ac:ed:b8:23:fe:4d:a4:29:ef:b6:06:96:aa:31:
                    1c:f4:5b:38:60:e1:8b:fc:dd:27:99:30:cf:f1:eb:
                    25:3c:b3:5d:af:8b:e6:40:dc:c8:98:83:91:ed:4e:
                    d2:ae:33:e6:7f:f5:bf:a7:68:26:11:21:fc:1e:75:
                    5a:36:f8:c6:a7:5f:23:ec:bc:fa:30:99:d8:2c:4b:
                    fc:3a:6a:23:25:7f:10:78:6b:5e:e5:ab:fa:e4:5e:
                    ca:6b:9f:85:3d:4e:05:60:21:d7:0d:c8:da:b9:3c:
                    3a:a6:2f:d2:67:ad:9a:7a:2c:c9:04:73:f3:55:b7:
                    ed:02:af:fc:c7:8f:2e:dd:67:91:18:86:9b:bc:c7:
                    57:a5:43:1a:cf:18:9e:8e:1c:b5:a7:14:58:ee:5c:
                    b2:f2:14:2f:1d:8d:f8:5b:dc:4f:7c:bd:73:7f:0b:
                    c1:23:f4:d7:a7:43:d4:4c:6a:e3:32:f6:0a:de:d8:
                    45:8c:28:a9:49:96:7d:c1:4b:86:91:af:19:70:a1:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:88:E7:27:F2:E9:9C:DE:35:F3:47:7A:38:6F:3A:E4:14:69:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8c882cc2-406d-3017-8300-39c36de0cee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:84:97:d9:2d:1a:b0:3f:0a:6a:f1:92:92:5a:6f:ee:68:a5:
         a7:6c:41:25:54:29:08:8e:db:3a:4f:13:90:83:ac:bd:12:fa:
         16:dc:06:74:8c:58:12:72:5e:01:8b:54:ef:a9:17:a1:8f:82:
         53:f3:65:37:26:48:cb:f0:e6:58:f6:ff:8e:49:4b:ad:f8:6b:
         a4:74:a0:c4:e7:be:b1:d0:b6:f6:1c:15:3f:3a:98:61:1a:9d:
         17:3a:4c:66:62:23:bc:08:91:2c:30:79:f9:ef:86:2c:fe:fe:
         77:a5:a6:b9:9b:65:5a:1f:ba:67:4d:e1:9a:13:62:68:b0:41:
         8b:cc:d3:68:9a:f2:82:4b:61:db:e0:32:97:c0:a9:30:19:8c:
         7b:83:a5:1a:49:2c:2e:bd:ae:7c:6d:65:e1:86:a5:97:44:bb:
         5e:c0:99:d0:da:f4:0f:e9:91:83:ed:bb:d8:8f:b6:ae:98:1d:
         ea:58:c1:f6:b4:8f:23:28:2b:78:55:e0:d0:d0:5d:89:6e:5f:
         6b:5e:73:1d:2a:26:54:46:e6:db:e3:34:4b:34:09:11:43:6d:
         f4:ac:63:73:9e:dc:10:32:f8:1c:4a:8f:19:fd:ac:af:e1:6d:
         86:2f:f9:32:77:3f:55:70:8c:58:d6:5e:42:b6:08:8b:7f:e0:
         78:48:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:48 2025 by rpki-client