Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/31589e23-e933-3342-8c62-23d54c7ba5a2.roa
File:                     31589e23-e933-3342-8c62-23d54c7ba5a2.roa (raw, json)
Hash identifier:          u5y3PmBZeO2KF3+NFrbsVSD+sUyaCa/YQqlTKe0HJyQ=
Subject key identifier:   09:C8:A2:F4:7A:12:59:62:11:FF:D8:46:5E:13:CB:23:26:B8:34:3A
Certificate issuer:       /CN=44222f2b-1203-4455-b787-472364f47a8f
Certificate serial:       010D0C9F4328584B89176FD5C6E66CCC0A5DBD00
Authority key identifier: DE:3B:4D:6D:84:3B:56:BA:7F:CC:27:30:53:D6:DD:90:A6:AB:23:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/31589e23-e933-3342-8c62-23d54c7ba5a2.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     2906
IP address blocks:        69.53.224.0/19 maxlen: 24
                          208.75.76.0/22 maxlen: 24
                          2607:fb10::/32 maxlen: 48
                          2620:0:ef0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6f:d5:c6:e6:6c:cc:0a:5d:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44222f2b-1203-4455-b787-472364f47a8f
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=510b3525-c6fa-4db2-bb45-11f8d0694dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:8e:a0:a2:6f:36:c6:40:21:ee:97:d2:4f:
                    3d:69:17:95:7e:00:8a:83:f2:99:e2:e8:6c:2c:45:
                    6a:ba:03:f9:ef:7f:3a:04:9b:cd:0f:0a:11:87:45:
                    64:a0:7b:25:c2:f3:ef:4e:89:a2:a4:89:c4:0b:99:
                    3f:43:01:6d:86:86:3d:a5:58:39:e1:fd:a1:22:05:
                    b9:23:2d:96:13:49:ff:57:c4:69:0c:9b:3b:72:94:
                    23:33:cb:dc:2a:ba:62:2e:e7:23:90:69:b7:46:af:
                    40:ff:85:0a:bc:93:b1:04:76:1f:f2:0e:2f:77:e2:
                    0c:1d:c0:9e:eb:eb:3f:2c:17:83:04:a7:e5:bc:ad:
                    b9:5e:38:4b:11:68:32:c1:d8:7d:af:2c:f3:cf:24:
                    5f:40:90:7a:0d:6d:88:57:f2:40:56:d6:fe:57:17:
                    c0:4e:2c:3a:91:0c:3b:67:b4:23:42:5b:cc:fa:51:
                    4c:4e:dc:3d:38:b4:17:77:69:be:87:9b:eb:e6:4d:
                    03:de:ce:b8:82:7e:a8:bf:e6:8e:a3:c0:da:94:2f:
                    50:db:e2:ae:4d:7f:1e:8f:9a:bf:02:d6:e5:03:c4:
                    44:bc:a6:04:5a:8a:9b:19:32:7e:6d:7a:ec:9d:67:
                    68:c5:71:b3:2e:7b:c4:20:3c:fa:50:59:e1:d6:99:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C8:A2:F4:7A:12:59:62:11:FF:D8:46:5E:13:CB:23:26:B8:34:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/31589e23-e933-3342-8c62-23d54c7ba5a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f/44222f2b-1203-4455-b787-472364f47a8f.crl

            X509v3 Authority Key Identifier:
                keyid:DE:3B:4D:6D:84:3B:56:BA:7F:CC:27:30:53:D6:DD:90:A6:AB:23:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44222f2b-1203-4455-b787-472364f47a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.224.0/19
                  208.75.76.0/22
                IPv6:
                  2607:fb10::/32
                  2620:0:ef0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:cb:49:fe:01:16:7f:a4:d1:1c:5d:24:7b:9e:f5:86:1c:4c:
         ce:9d:23:fc:71:44:93:96:a7:55:45:f2:3a:71:0a:76:48:ee:
         3e:19:1f:ae:28:51:3f:04:bb:08:55:2a:4b:f1:32:9b:6a:03:
         f2:74:e8:a5:63:7d:53:03:bf:34:b2:cc:9b:0d:62:e9:61:10:
         f1:9d:40:63:db:2b:5b:e7:c9:9d:1e:18:31:36:98:a5:a7:e5:
         ab:bd:fa:90:2f:6e:4b:79:b5:18:f5:ae:1c:4b:3a:d2:47:00:
         a3:41:da:cd:c4:22:48:1f:40:1a:28:96:21:b5:b4:41:be:d4:
         82:4e:79:56:50:9a:45:c6:f5:6c:07:76:8b:27:94:33:99:0b:
         8e:f3:08:af:50:52:f4:cb:fb:d9:f9:2c:6a:f8:27:e4:29:41:
         6f:6f:e6:24:37:08:fc:eb:81:71:25:eb:f6:4d:89:0f:c2:b2:
         31:f7:8d:dc:e0:07:14:1e:c0:7b:c0:a4:6e:6d:3e:2a:0e:ed:
         4b:7b:4c:50:33:f8:2b:7d:e1:49:ad:eb:77:57:9b:1b:a3:d1:
         83:a7:c0:3b:45:2b:f2:45:10:3e:80:08:5c:a4:41:d5:1b:e2:
         ca:90:f5:94:7e:6a:77:49:ed:00:1a:25:3e:ae:64:88:41:3f:
         f1:00:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:14 2025 by rpki-client