Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
File:                     897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa (raw, json)
Hash identifier:          WsCUEcRLIpkjUJei1Gv/gt5s9VgWj9pxHiW+teZlwWU=
Subject key identifier:   B3:37:61:4C:F5:1B:46:24:97:46:18:D1:C0:F4:07:EC:CB:45:5D:ED
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584ACE0B9F182D80BA9BC9B40180
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     11924
IP address blocks:        208.75.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9f:18:2d:80:ba:9b:c9:b4:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=15d07124-d486-4b01-b988-76ef48e13c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:c0:ad:00:7d:4e:b3:d3:c0:62:c6:bb:b4:
                    ad:73:96:9e:18:15:b5:bc:18:6c:e4:f1:11:f2:9d:
                    86:fc:ad:dc:14:ab:50:2a:90:20:70:22:45:f6:ce:
                    d4:f5:4e:e5:cc:7f:4c:19:5a:7a:9e:ce:4d:10:3a:
                    8e:4c:54:a5:03:66:10:3b:b6:58:0b:8a:45:18:aa:
                    90:ee:d6:36:3c:38:20:0a:62:7b:38:58:bb:92:f4:
                    40:b2:5f:2d:81:19:d0:26:3e:2c:9c:7d:1b:bb:d1:
                    6b:ae:89:5f:b5:6d:cd:3e:e4:22:d9:f5:3f:79:67:
                    1b:63:57:2f:7b:cd:d4:3d:e2:92:bd:32:92:82:2d:
                    ea:3a:be:82:2c:2a:e7:78:ff:f3:b4:4e:3a:c0:fc:
                    71:e7:8c:91:42:df:f9:da:3f:2f:bf:d8:22:61:af:
                    54:9e:b9:75:95:6a:4b:ba:11:dc:d1:1c:82:34:28:
                    b8:83:e2:34:65:ae:f7:6c:de:e3:d4:cd:e8:97:94:
                    8d:f7:fb:78:ee:18:9d:f5:16:f7:4c:e8:db:f6:c0:
                    09:09:eb:10:64:75:47:66:90:3e:b8:56:79:94:ad:
                    0c:a8:2e:e1:9d:56:a0:9b:9e:ce:79:d9:6a:0c:5f:
                    34:c7:29:77:d4:32:48:31:6f:61:0b:bd:e5:df:b8:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:61:4C:F5:1B:46:24:97:46:18:D1:C0:F4:07:EC:CB:45:5D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:9c:63:92:1c:c7:78:89:48:2f:fe:37:45:8d:c2:7e:84:
         4d:20:72:83:12:c1:4c:1f:bf:d4:fb:0f:8d:7d:b9:17:92:20:
         9c:b1:0f:a7:2c:b9:e2:e7:8d:48:cf:bb:77:4e:83:2c:15:38:
         1a:9c:d0:98:02:f6:0f:83:e0:93:13:d9:8f:62:0d:0a:92:58:
         92:d7:26:97:07:1f:e6:7f:9d:ac:9c:8d:a0:2f:02:50:32:c0:
         7c:31:f8:61:aa:5f:84:35:0b:7c:b7:1d:3d:92:bb:88:73:db:
         d0:ed:55:6a:c9:62:54:10:29:ed:32:f3:8d:09:44:01:a3:75:
         e0:f4:70:b7:63:0f:ae:6d:ad:e8:b1:84:ea:e6:b3:6a:65:72:
         52:86:b0:0d:51:8a:16:1a:a5:63:bd:7a:b4:e8:7a:f5:20:43:
         0b:3b:91:51:1a:b9:dc:a9:ea:fe:94:cf:bb:ed:33:2a:8e:64:
         0a:ec:3a:24:95:61:c7:2b:8b:de:5c:88:bc:26:fe:46:93:5f:
         70:69:8e:e6:88:2c:32:c5:e6:b8:f8:91:f0:c0:0d:0d:e6:4c:
         0b:ed:e9:9e:c3:ca:9f:bc:41:eb:79:b5:8b:d6:55:16:e0:ed:
         0b:0c:b1:f3:ae:2c:de:d0:a4:c4:05:39:b5:4f:58:5b:a3:8e:
         52:51:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:41 2025 by rpki-client