Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
File:                     40dfe575-7376-3072-83e5-39cbefff6fa0.roa (raw, json)
Hash identifier:          qe32N86b0aAzb1LSm8f34UW86a9cK5Zfp6tAlEXP3Qg=
Subject key identifier:   3E:C4:B1:D1:8B:11:A7:8F:00:1D:04:5D:77:80:B6:1A:79:16:7B:3D
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584AE4612878F6FA686D59668A00
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        64.112.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:28:78:f6:fa:68:6d:59:66:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=4533dafd-34c8-47ca-a17e-9d8e276eb901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:8e:d3:57:87:50:d7:b7:73:6b:df:c0:56:
                    b0:35:c9:19:78:c5:4e:e9:2a:9a:4b:10:37:96:3f:
                    84:19:81:94:1d:d5:47:b5:b5:84:de:5d:f9:b0:48:
                    0c:6e:8c:b6:9e:50:50:bf:17:76:92:53:1f:06:c2:
                    af:d2:22:af:7b:bd:1e:c4:5c:e8:5c:de:60:85:4d:
                    bf:20:3b:e9:08:0a:29:cf:fb:0e:57:15:1a:2f:ea:
                    6d:86:2a:22:ed:d4:f4:ba:fc:03:87:d8:8f:96:db:
                    cd:a3:7e:4a:b8:31:5b:08:18:d6:85:52:9f:c5:6c:
                    ac:88:c2:ad:60:d1:d2:4f:f0:e4:00:05:9a:25:16:
                    b3:0f:40:91:cf:a7:7c:3d:09:7a:5e:05:54:c3:0b:
                    79:f4:a9:53:7c:a9:41:34:65:4a:c3:72:4b:0c:f1:
                    b0:6f:ac:7a:59:5a:45:a6:b9:bb:c6:96:99:84:01:
                    3e:c6:7f:7d:fb:1d:57:b7:0f:d5:9a:ca:85:78:36:
                    97:91:5d:8f:f0:36:da:d1:cf:56:f3:ad:e9:97:a2:
                    31:ac:9b:38:a7:4f:23:ca:a0:16:d3:41:3a:bf:72:
                    ce:15:7c:86:7b:61:97:17:14:08:fa:57:4f:75:05:
                    ed:52:0a:13:31:7c:ad:bf:c7:89:56:0e:87:e6:83:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:B1:D1:8B:11:A7:8F:00:1D:04:5D:77:80:B6:1A:79:16:7B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:f7:94:9c:1f:2c:94:48:91:f0:c3:24:10:ba:cf:e1:8d:
         a9:46:88:b0:b4:24:ec:1f:b6:72:0b:ee:49:b5:d7:97:6d:af:
         16:e4:c6:fc:93:7c:64:75:0e:95:3e:6f:8a:13:f9:dd:6a:a4:
         cf:10:7c:2f:e1:f0:2f:7a:4c:81:02:b8:88:85:69:e1:3c:8c:
         f0:a7:2a:28:14:5a:4d:81:cf:71:30:95:2b:8b:82:65:ee:6f:
         a3:43:a7:25:98:37:6d:9e:63:d9:9e:21:b9:ba:25:b9:47:77:
         ee:ed:59:51:15:f3:af:47:05:34:0f:66:d2:d5:01:2c:7d:1e:
         50:0f:73:04:10:7d:52:d0:55:e4:5a:c0:6a:39:c1:06:07:dc:
         64:fe:3c:96:69:04:55:e1:6e:75:a5:53:e6:f1:29:14:3e:84:
         0d:c0:a2:b4:3b:ce:00:b7:5a:12:cd:e6:ff:2b:67:5f:2c:90:
         ca:f7:11:7a:cf:a4:62:b7:43:7d:62:ad:b8:f2:79:16:89:43:
         f2:b5:64:28:65:f5:bd:5e:cb:45:71:2d:4d:2b:ad:c0:b6:af:
         cb:95:95:4e:28:53:9c:cc:4f:5c:58:6d:f2:99:e8:20:bd:c5:
         c8:22:ba:55:a7:c3:6f:88:a6:b6:a9:2a:15:03:27:7d:b6:90:
         9b:b7:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:15 2025 by rpki-client