Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa
File:                     70ac0f19-e0fc-3fc5-8219-1baf18611199.roa (raw, json)
Hash identifier:          NosqzHsDVS0MKU1l01aZS1cq0Rp1ESJmBfGT5Bk0yqI=
Subject key identifier:   0A:2B:E4:0D:F5:22:96:35:35:13:DB:7E:27:96:1C:FA:B9:2C:FE:E6
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AEF8BC5C3039107979C578E00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     136557
IP address blocks:        209.145.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c5:c3:03:91:07:97:9c:57:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=e1f40ef8-b84f-4bc3-a5c3-e2659edbc79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:16:6e:ce:6a:90:bc:d3:6c:3e:af:8b:47:
                    e1:be:02:38:d4:f3:a8:62:4f:76:fe:71:f4:22:16:
                    95:eb:b6:b2:6b:45:d4:50:70:ec:54:1b:e3:45:54:
                    35:3e:0d:c5:c6:fd:5f:36:41:f4:b2:46:a0:02:e3:
                    9a:81:5f:71:4c:cc:67:98:6e:a0:b0:c5:59:a7:ce:
                    6f:56:70:95:b3:dd:df:91:e4:b7:9e:55:b8:68:ec:
                    7a:5e:d6:7d:3a:1e:54:cd:f0:3c:b2:32:17:27:1e:
                    c2:3e:34:9d:82:1f:b1:4b:41:f3:14:b4:d6:86:f5:
                    d5:88:2d:a6:55:b7:be:2a:9c:f5:56:b2:d2:98:5c:
                    3c:c6:ef:51:03:f8:ce:5e:80:0b:80:51:26:a1:91:
                    87:1f:40:66:09:75:f6:5a:98:30:6c:75:55:90:ea:
                    89:5a:1d:f9:5d:33:ad:15:11:95:b8:ce:81:bd:62:
                    3d:e7:43:7f:1f:cc:e2:94:cc:c7:d4:a2:2c:4a:16:
                    62:27:9b:5e:c0:56:44:92:fb:0b:70:94:2d:91:a9:
                    1a:64:1d:48:be:fb:2a:05:85:82:18:e0:8f:ab:9f:
                    61:d8:26:9c:83:63:78:51:e2:58:9b:23:43:ba:d9:
                    36:1f:d4:f5:00:e1:62:f7:33:70:b2:c6:4d:ab:5b:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:E4:0D:F5:22:96:35:35:13:DB:7E:27:96:1C:FA:B9:2C:FE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:ab:ac:d6:3d:af:20:66:26:e2:ee:e4:28:08:da:6e:0d:
         f5:c5:70:b3:e3:57:48:9d:6d:59:a6:86:e1:42:35:10:9d:b8:
         9a:6b:5d:5c:81:f4:17:2d:89:d2:ae:03:75:3f:fe:db:59:4d:
         4e:49:ef:07:a9:c8:ea:a6:7e:1d:6a:6c:ef:9b:07:6a:de:44:
         42:49:87:0b:34:08:35:0f:1d:03:40:94:14:14:bc:4a:62:73:
         64:0b:48:a6:f4:e0:97:6e:fb:6b:2d:2a:25:29:c4:c0:08:fa:
         58:0f:13:bd:22:cf:7c:63:1a:3c:85:6b:44:ec:56:60:6f:45:
         09:80:e2:a8:a6:30:bc:b3:e6:f0:0f:93:f5:9c:94:f8:c1:19:
         e8:90:0a:b3:52:7c:c9:fc:7e:fa:4b:05:6a:2c:bb:37:53:3b:
         bf:b9:e8:6b:3e:b1:2f:a0:61:f2:1f:92:af:b7:59:b4:41:33:
         b7:3c:15:d8:c7:2f:cf:b9:2c:27:be:30:cb:00:08:f0:a0:36:
         e3:73:64:1f:0c:0e:36:2d:77:9e:30:74:aa:bd:47:96:23:ba:
         24:8d:6c:8a:d6:59:2f:34:6a:94:a8:76:6f:e8:4d:73:f1:c6:
         d4:e2:af:af:ea:3f:f4:41:bd:fd:69:f1:9d:c1:6f:3f:94:a4:
         f1:29:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:21 2025 by rpki-client