Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa
File:                     b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa (raw, json)
Hash identifier:          8cYc/puKRB8CFpiKOiS6dT+1xaEGN0t9CxrH2glVpvE=
Subject key identifier:   1F:51:2E:A4:1C:4F:93:B1:8F:AF:A0:64:8C:77:86:9E:8B:45:19:F2
Certificate issuer:       /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial:       010D0C9F4328584AE89137C15DECFD351D91D880
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     7018
IP address blocks:        208.72.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:37:c1:5d:ec:fd:35:1d:91:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=5489db2a-45a1-41aa-b5c7-dcb52fd9069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:b8:e0:02:bf:4c:ed:89:bc:0a:4d:55:83:
                    e7:38:49:ac:ab:4d:e3:a8:5e:df:7e:61:07:da:d9:
                    48:9e:42:45:87:eb:fd:be:8d:85:c2:21:47:7e:fd:
                    7c:0f:92:f9:e7:e9:bb:f3:80:8f:4c:97:d0:69:27:
                    1e:d2:f9:03:f6:e3:64:dc:47:1a:56:5f:48:eb:ff:
                    f0:6b:02:b6:42:a0:18:8c:1f:01:39:37:ff:73:6f:
                    5b:5c:a1:b5:9f:8e:59:4f:03:34:da:af:d8:a3:e7:
                    d3:63:c2:45:85:49:f9:dd:83:12:32:f3:71:5d:a9:
                    45:48:68:f7:17:7a:b1:98:7e:9a:f3:a8:bd:76:d7:
                    7e:59:ed:9f:a4:34:19:2d:12:21:22:f3:56:47:3e:
                    7a:58:a1:c1:87:f8:bb:b8:66:67:45:be:fa:41:87:
                    e4:e2:d6:9c:28:a1:32:e4:8b:ef:57:b9:29:be:28:
                    5c:53:c6:7a:33:d7:0e:92:49:8e:c4:26:36:d0:98:
                    81:d2:a0:87:45:98:62:4f:6a:58:6a:00:2f:08:d1:
                    30:ec:2c:1b:ff:63:01:36:16:bd:e7:22:58:bf:a7:
                    29:ca:25:6f:9c:1a:4a:6d:cd:df:10:3a:7e:8c:eb:
                    36:28:53:2d:a0:15:7d:f5:e5:19:c3:85:a8:6a:83:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:2E:A4:1C:4F:93:B1:8F:AF:A0:64:8C:77:86:9E:8B:45:19:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/b92067e6-1305-39ca-9edb-e1c87b1d00d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl

            X509v3 Authority Key Identifier:
                keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:d8:58:14:9d:a1:ec:51:77:0f:d6:f6:a5:f1:46:c4:33:
         50:fe:21:a3:26:3e:00:07:e6:cf:c8:82:c3:73:6f:ae:0f:8f:
         87:18:ee:7a:16:44:c6:9b:ee:2d:fa:e1:c1:12:3c:0a:71:83:
         98:c7:3f:f2:ed:c5:34:e7:d0:63:5f:d7:c3:67:94:5a:f7:f3:
         10:40:c2:c9:ba:3d:f7:cd:aa:36:f6:f0:c5:7d:ca:a3:8d:63:
         da:d3:0f:fe:21:22:09:8a:38:60:ac:6a:fe:de:62:82:aa:f5:
         25:e8:c9:c3:77:a6:c6:79:67:29:98:28:ba:4a:80:81:e9:39:
         a4:f8:b5:a1:89:ab:81:bc:5f:e0:f9:31:81:43:28:24:2b:8c:
         0b:f5:71:7a:3e:e2:fd:e6:4c:66:7a:06:73:98:bb:e3:19:76:
         8a:62:e6:33:08:31:db:09:bf:4d:6c:73:dc:90:75:ba:37:a0:
         fb:c7:be:35:bc:3d:f8:83:df:08:2f:03:82:86:1e:ce:f3:68:
         a7:58:ea:d1:95:eb:10:ed:4c:07:b7:59:bb:66:1b:5b:d1:ec:
         4b:05:8a:35:e0:2f:a1:8b:4e:40:16:47:2f:f6:ef:25:74:23:
         e4:f3:b9:14:a3:ef:29:66:f5:88:f8:ee:7e:f1:81:60:82:d8:
         65:2a:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:42:40 2025 by rpki-client