Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
File:                     547db2f7-b235-3247-a2f5-f5afd418ff69.roa (raw, json)
Hash identifier:          dQN6/NcJxQAI/wJXqQoJ8c90lW1U8Dl4N2JbqAwweFY=
Subject key identifier:   8F:7C:DF:32:C6:C3:89:FC:13:1F:79:D6:FA:64:80:26:50:21:AD:F0
Certificate issuer:       /CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
Certificate serial:       010D0C9F4328584B0E4167A14DC8266EA93DEEA0
Authority key identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     30027
IP address blocks:        68.232.48.0/20 maxlen: 24
                          192.160.54.0/24 maxlen: 24
                          207.195.128.0/19 maxlen: 24
                          208.84.76.0/22 maxlen: 24
                          216.144.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:67:a1:4d:c8:26:6e:a9:3d:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=9373c59f-0eae-4e47-8c79-ce97cdb74f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:dd:4d:c3:ea:36:4c:07:fa:41:07:55:de:
                    e3:7d:ce:1d:8f:d9:3a:4f:33:f9:c4:0d:d7:42:3e:
                    27:55:31:5a:f5:aa:20:d7:f2:76:a0:71:fc:67:66:
                    0a:de:c2:06:d4:a2:fb:83:d9:95:fa:25:76:1e:07:
                    bb:ff:8c:c9:7d:70:4d:24:d2:fb:74:82:6c:5b:26:
                    50:d1:74:02:92:95:45:3f:9e:58:cc:4d:4f:2d:59:
                    82:90:55:31:77:85:35:51:67:bc:f0:ff:28:c0:80:
                    68:f6:e7:b8:96:aa:c4:f8:a7:08:7f:01:71:6e:d9:
                    6c:b8:fe:ec:8d:5d:52:af:2d:91:a4:21:84:61:53:
                    ab:7b:73:9f:be:35:fe:84:0b:ed:61:ce:04:a9:e8:
                    21:0e:ab:de:a7:a0:ea:64:82:72:3b:53:52:d2:01:
                    2b:f2:2f:83:96:a3:44:46:0a:d4:c1:2f:11:7d:8a:
                    27:f4:02:91:44:dd:5a:71:cf:e6:76:ca:db:fd:0d:
                    f2:e3:b7:99:2a:59:fa:4d:20:63:0c:4d:35:2f:1c:
                    d1:cd:f9:ea:58:b6:ae:cc:d2:ee:b6:8d:d3:5c:08:
                    ea:85:5d:09:d7:94:88:a1:92:d3:1e:5c:31:8f:b5:
                    e0:f6:f9:53:9b:d9:aa:71:ce:88:e7:ca:2f:35:68:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:DF:32:C6:C3:89:FC:13:1F:79:D6:FA:64:80:26:50:21:AD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl

            X509v3 Authority Key Identifier:
                keyid:B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.48.0/20
                  192.160.54.0/24
                  207.195.128.0/19
                  208.84.76.0/22
                  216.144.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:62:f0:f7:38:16:3a:0c:78:86:9d:22:8f:46:53:7e:6b:
         c6:e0:1d:16:7b:44:99:da:24:76:19:35:a8:9c:6e:b2:0b:49:
         a7:14:e6:33:80:75:d3:d1:08:7f:8b:2f:0e:f8:25:95:0d:82:
         bf:b5:22:08:c2:69:4e:56:54:55:86:79:89:a9:fc:f2:c3:25:
         9d:a7:b8:95:8a:b1:6b:55:81:42:58:c5:20:69:dc:80:42:71:
         bc:f0:c4:ce:f9:17:e5:03:21:03:60:1e:9b:1f:5b:c6:eb:17:
         a0:14:9b:97:61:73:6d:bd:6d:cf:29:dc:0b:52:40:6a:62:e1:
         f9:e4:57:53:6d:33:86:e7:fd:7b:3a:dc:0e:48:b8:33:1d:f8:
         60:be:be:2b:a5:67:07:2c:07:95:b6:0e:4b:f7:0a:7c:6a:e1:
         1b:4d:f3:26:b9:a6:b5:3f:8d:37:5c:7c:af:0e:81:4c:80:51:
         e8:92:dc:3e:f2:32:4b:41:62:86:38:2e:75:73:af:ad:75:01:
         03:47:d1:6c:5e:09:d1:48:db:29:1a:52:80:9b:08:b5:a7:3f:
         2c:9e:44:c5:9b:ae:bd:57:a2:fa:02:9a:33:b1:41:8e:0b:c9:
         98:ee:87:72:55:68:32:22:37:45:ec:c0:13:c2:75:46:2e:d9:
         93:23:41:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:04 2025 by rpki-client