Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
File:                     4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa (raw, json)
Hash identifier:          TPMzf4csadCQ0/GWhKPedQHYqW9h5kwlWSXDelDdoBQ=
Subject key identifier:   88:12:CF:C2:90:59:DF:46:57:69:EC:E3:3A:25:01:1D:BD:10:A4:39
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584A454033D9DCBDB182A914C980
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     26342
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:33:d9:dc:bd:b1:82:a9:14:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=3d92f57e-e1ae-4b8a-92f6-9cfa30efab69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:34:c2:33:71:53:b4:ac:d3:1f:a6:a1:02:
                    a9:5e:a1:45:b6:f3:c7:76:8b:77:c8:81:f9:a5:0a:
                    50:96:05:65:f6:52:1d:73:7c:2d:f2:a9:f2:04:c5:
                    7d:e8:30:11:e6:f1:8f:2e:e2:40:00:4f:59:7d:34:
                    f3:ff:7e:33:fe:c0:7c:f8:71:96:fc:a1:06:20:89:
                    5f:16:d4:5b:ea:93:d5:c8:60:5d:e7:ed:9d:eb:4e:
                    2c:5e:64:db:6c:be:d8:a7:31:27:cb:97:74:ef:56:
                    f2:4b:09:b8:4e:a6:d9:4c:15:b9:4e:0e:48:6f:64:
                    c5:67:60:98:12:7f:61:0e:2e:b7:e7:42:2b:a9:e7:
                    4a:a4:9c:3a:3c:5a:a1:3a:6b:51:9e:d2:ba:f4:1e:
                    68:e8:95:07:fc:9f:26:a1:f5:4c:c8:f9:f2:7c:fe:
                    32:d4:06:b8:81:6d:ba:5a:cd:91:ef:d8:6c:0d:af:
                    4d:1f:50:76:44:bb:73:74:0e:02:bf:c2:75:49:69:
                    ee:94:a1:b5:f9:9e:52:ca:c7:e2:4a:ad:aa:38:d0:
                    83:ab:4b:82:4a:be:85:38:39:86:72:2e:e9:34:cd:
                    e3:58:0e:a0:85:14:15:64:7b:d1:37:97:33:eb:b6:
                    2e:0f:2a:bb:ae:bd:84:d7:9a:cc:a0:3d:9e:c6:cd:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:CF:C2:90:59:DF:46:57:69:EC:E3:3A:25:01:1D:BD:10:A4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:58:0b:6e:30:88:b8:08:bf:35:b5:aa:4c:f6:92:cc:d3:
         a3:42:be:10:83:10:97:71:f4:da:60:da:00:f2:3e:86:fa:a8:
         89:1b:e5:2a:a6:78:8c:fd:54:df:02:44:ae:47:a9:84:f0:a7:
         38:b4:8b:91:bb:d0:5c:d9:6b:27:0a:7e:c5:cd:10:45:d7:6b:
         a1:b8:00:4d:fb:ae:a7:be:4c:a6:e8:13:c1:40:75:98:06:a7:
         53:9c:b1:17:f3:a1:4a:80:92:82:12:a2:8c:58:31:74:64:ad:
         f0:45:5a:bb:ec:bb:fd:8f:fa:51:af:53:36:ed:91:5d:b0:45:
         d2:b9:86:95:8f:bd:dd:72:f8:0f:24:84:60:4d:6e:70:e0:63:
         00:a2:73:a5:fd:72:0f:3b:c4:46:a3:c9:ab:69:0b:06:c8:f2:
         5d:8c:de:1e:0c:94:84:f1:bc:21:dd:21:52:ba:1c:9c:e9:95:
         22:5c:07:e7:44:be:ce:36:a0:96:89:b9:52:6d:44:4d:12:03:
         81:ad:46:bc:92:cb:80:66:0d:91:a0:dc:2b:c4:dd:13:83:c5:
         a7:d2:3f:d3:37:b9:c4:9a:cc:59:0c:7a:36:70:bd:f6:fb:9e:
         e8:02:4b:cc:f1:52:7b:5d:01:66:fb:9f:7f:3a:5e:04:da:75:
         bd:59:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:36:42 2025 by rpki-client