Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa
File:                     2e73e149-085f-345e-acd0-10867059c3f9.roa (raw, json)
Hash identifier:          FVyTcphNEi2EPidlAs51kMNBZBjTH0DabL2CENLTWoc=
Subject key identifier:   77:E5:55:CE:F1:CF:5C:5B:52:2F:E4:AD:2C:C6:AD:86:9B:CD:31:80
Certificate issuer:       /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
Certificate serial:       010D0C9F4328584ACB411E27F45A17F4D091EE80
Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     23102
IP address blocks:        66.206.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1e:27:f4:5a:17:f4:d0:91:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=368bed41-3491-4806-8faa-a250d686d2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:50:da:d4:9f:c2:35:b0:8e:1b:29:53:7a:
                    d2:a4:6c:6c:cf:f9:6f:3d:27:aa:25:4d:56:3f:83:
                    8f:1e:5e:7c:7f:62:b4:ba:ac:be:7d:bb:de:51:10:
                    ca:9d:28:dd:97:20:f1:80:06:cd:93:0a:f0:bd:0d:
                    76:43:64:f4:54:1e:99:e8:ba:e9:cd:aa:73:31:f1:
                    74:2a:ce:60:d6:28:84:62:11:45:19:63:7e:6e:e3:
                    a4:e5:3a:22:1c:9e:10:ff:28:9d:7b:4d:0f:7e:cb:
                    31:71:3f:71:48:0d:77:cf:c3:94:b9:b5:f7:c3:01:
                    19:b7:12:02:e5:62:8b:de:fa:f3:11:96:2b:b8:d6:
                    a9:0a:19:bd:a7:44:95:52:e8:a3:0a:ec:20:ab:be:
                    79:f2:bc:71:4d:0c:b6:b2:53:bb:36:7f:35:68:1b:
                    34:4d:33:0d:25:66:3a:c9:f0:3f:0c:58:83:b0:0e:
                    35:3f:1d:c4:c5:51:91:26:32:b0:26:57:b8:bf:20:
                    b2:8c:bb:71:f6:3e:81:2d:02:48:7b:61:84:e9:86:
                    66:c5:cc:ad:ea:15:f4:83:79:10:79:8b:1a:4f:3e:
                    54:a0:d2:a3:8f:e4:c8:28:8e:94:ac:a1:4e:d1:f2:
                    38:4e:38:98:e1:7a:cb:84:f5:15:1a:34:4e:a0:e8:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:55:CE:F1:CF:5C:5B:52:2F:E4:AD:2C:C6:AD:86:9B:CD:31:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/2e73e149-085f-345e-acd0-10867059c3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl

            X509v3 Authority Key Identifier:
                keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:5a:3c:97:a1:46:a5:7b:c9:fe:77:ca:4e:54:87:ef:47:
         2f:bd:d2:cd:b8:81:5f:b3:59:77:82:9f:7b:8a:67:27:90:11:
         b7:85:68:79:69:b7:fd:17:0c:0f:34:55:c3:f1:8b:85:88:c8:
         c6:94:19:af:d9:91:e4:3d:2a:da:64:dc:9b:4d:de:07:3d:bb:
         a6:bc:2a:5b:f3:6d:7a:fd:d8:81:07:54:f4:e9:75:3f:ca:d4:
         14:82:9f:a2:bc:74:c9:a2:91:c1:d0:2b:55:ed:6d:6a:0a:0a:
         09:f3:6a:75:32:3b:eb:d7:e0:a7:63:d5:4a:00:ed:c6:41:5a:
         77:52:a2:9c:1b:f6:2f:3c:da:5e:8b:ae:89:0a:bc:9e:54:1c:
         9a:6a:cb:4d:24:bf:40:d2:ba:45:d5:08:86:d5:ac:27:31:33:
         cd:3c:71:2a:8b:6d:b8:97:ee:d9:3f:8d:c1:88:fe:0f:ea:76:
         96:99:c7:19:a9:d9:67:db:70:1c:63:d7:bd:93:b1:9b:04:90:
         c8:27:ec:4f:b9:4e:5e:d7:9e:38:3b:50:c0:8d:4d:78:f1:43:
         69:be:cd:ce:b3:09:ad:4c:93:95:9e:ca:68:3a:78:57:96:e0:
         a0:de:79:f6:6a:eb:bf:9d:e7:b2:cc:0b:3c:a5:1f:0b:a8:e7:
         0a:ac:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:57 2025 by rpki-client