Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6e2c9b-c023-3333-8aea-b610a5d82111.roa
File:                     7a6e2c9b-c023-3333-8aea-b610a5d82111.roa (raw, json)
Hash identifier:          E/uG6i2NFaxVybj+xhD6ynw7jGbgfmvMF04Jbo8ht04=
Subject key identifier:   53:6A:B0:A5:FC:64:FE:4D:C7:A0:AB:9B:EF:FD:89:D2:46:EB:2D:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF2569B309034D47680715B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6e2c9b-c023-3333-8aea-b610a5d82111.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        104.71.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:9b:30:90:34:d4:76:80:71:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=e52f173e-66b7-4583-9408-0a28f28401ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:0f:79:f9:68:f8:3a:7b:ca:42:62:b2:51:
                    93:41:6f:b1:93:7d:94:66:47:1e:0b:ad:be:d3:d5:
                    4c:a3:54:4c:21:30:68:6a:47:25:56:9b:5b:2e:0b:
                    e7:f7:d0:7f:58:e6:cb:8a:4b:85:3b:f5:13:69:c9:
                    3c:66:18:07:cf:b5:fa:9f:bb:25:32:15:d8:5f:77:
                    ed:2c:f1:20:57:29:74:c6:57:9d:da:a6:99:c9:e1:
                    56:2e:87:69:83:06:a5:30:d1:c5:fc:ad:75:9d:23:
                    c9:43:b1:b9:c4:41:c2:ed:2b:4f:d9:41:5e:d5:0d:
                    59:ea:b8:f7:d3:2e:b6:f0:b3:ac:4b:a0:d9:b2:88:
                    89:76:79:d7:c2:6e:23:eb:bc:4b:9a:92:d1:8e:35:
                    b9:60:0e:67:0c:5f:7d:65:2d:55:8e:55:1f:2e:14:
                    69:68:b4:57:b9:4e:b2:f2:10:34:c1:f3:36:72:58:
                    41:e5:3b:fc:72:28:3f:c8:ea:7a:c6:62:03:c1:9b:
                    48:77:b1:54:ef:90:88:26:c0:95:b9:e1:a6:9c:7d:
                    c0:7d:b2:0b:a2:14:9c:f0:e2:13:38:0d:a4:26:5b:
                    e8:33:09:8a:e9:c6:bb:b2:42:d9:d6:75:25:6e:7c:
                    45:e1:d8:94:ee:d3:ab:79:ef:bf:e0:74:8e:32:ef:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:B0:A5:FC:64:FE:4D:C7:A0:AB:9B:EF:FD:89:D2:46:EB:2D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6e2c9b-c023-3333-8aea-b610a5d82111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.71.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:4d:fe:86:1e:6b:4e:3c:78:98:ee:b9:63:4e:c5:2a:a7:
         1c:3c:7c:59:c6:62:f2:cc:f4:8c:76:1c:3a:e3:60:f1:52:ef:
         1a:1c:d3:af:23:ea:33:b3:c3:ca:dd:17:35:de:a5:a5:41:a4:
         61:47:c5:d4:d7:5a:24:aa:1f:81:5e:5d:34:44:09:dd:f9:6d:
         d5:25:8b:85:25:7e:86:0e:4a:a6:8e:40:cb:0d:7b:4e:7d:a6:
         2c:e7:d3:23:e9:7c:1d:e6:d5:d9:a8:fc:21:ea:b1:99:b7:3e:
         d5:b1:46:ff:d7:f4:e6:9d:d1:27:9c:fa:60:80:e9:f7:1e:7d:
         18:a1:96:0e:04:3b:fd:0f:45:19:c1:94:93:9e:b8:b9:92:10:
         41:7d:87:67:e3:3f:ff:36:3d:67:70:11:44:92:cd:d6:d6:9b:
         5e:62:b9:54:b8:97:1c:69:3c:0b:8e:be:2c:5d:83:36:8e:24:
         d4:04:14:4d:d0:26:65:76:ad:5f:38:dc:d6:5d:39:0e:9f:d2:
         0e:5c:d2:66:ad:75:ee:18:ab:a3:08:fb:b9:9f:40:61:e9:a1:
         40:87:27:17:fa:e4:7d:19:a4:7e:8b:d9:cc:ea:2c:23:9d:7a:
         ab:0f:8d:79:04:f0:d3:d5:eb:8a:ca:91:81:bd:54:90:37:bb:
         83:f7:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:09 2025 by rpki-client