Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
File:                     afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa (raw, json)
Hash identifier:          lFWPzY+sL7oetYXWHwnhfbCMW//nCehoFcG8Q0/1AzE=
Subject key identifier:   AD:1B:61:59:FE:7E:B3:87:8F:5C:24:76:F8:D4:DC:0C:72:71:ED:9B
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584A374AC6F508D77469A0E1D340
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     14870
IP address blocks:        162.244.220.0/22 maxlen: 24
                          2620:122:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c6:f5:08:d7:74:69:a0:e1:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=41975526-3f78-492a-94fd-aeebfefe1cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:c7:a2:72:ec:35:ef:d5:6c:55:72:ee:b0:
                    26:9b:d5:c2:bb:fa:fb:79:66:f1:f7:7d:9c:af:95:
                    51:40:af:7d:0f:73:ed:ef:74:5e:21:eb:7e:f1:05:
                    62:77:a6:9b:87:73:4a:e5:11:3c:a1:b9:53:24:39:
                    e8:69:42:67:46:3e:ef:30:7e:d3:fa:8a:80:46:3a:
                    98:42:13:cc:6f:90:76:00:88:20:5b:59:27:19:c0:
                    e1:12:da:df:f9:25:fc:d0:1f:a2:90:af:b4:7a:fb:
                    d5:0e:24:be:d4:dc:67:97:22:74:80:e1:be:44:73:
                    80:d0:a4:b0:0c:fb:c6:24:5a:dc:03:ab:69:76:24:
                    08:cb:ec:c6:87:2c:c7:b9:14:3d:55:98:6b:1d:27:
                    73:b5:ee:30:89:c1:f8:90:66:d8:39:35:64:d5:01:
                    06:45:90:72:61:30:e5:f3:c2:47:47:58:8e:87:b9:
                    5f:e3:bc:e1:3e:10:d2:dc:47:6c:5f:a1:c5:80:da:
                    b8:6b:79:64:11:8f:71:78:d0:03:c1:81:dd:d1:3e:
                    38:7c:63:7c:75:57:a8:06:36:df:b6:f4:a4:f2:8c:
                    e1:91:92:1b:35:3d:80:a4:13:86:fb:a8:6e:d0:27:
                    5a:83:a7:e7:f1:df:ed:14:fa:65:0e:7a:b3:a6:d9:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:61:59:FE:7E:B3:87:8F:5C:24:76:F8:D4:DC:0C:72:71:ED:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/afb96d91-1fd5-3ed7-ae8a-cf480905f4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.220.0/22
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:d1:62:84:de:5d:0c:bd:da:69:20:68:2a:ad:7d:ec:4e:
         f5:2b:ab:16:5e:82:74:04:ff:d6:75:95:fd:3b:88:30:b3:0d:
         ec:c8:cd:cb:14:a9:55:6d:f0:73:6e:81:c9:52:88:40:13:97:
         75:d0:ba:bc:2d:77:ba:60:4f:f1:06:8f:e8:01:8e:c4:71:a6:
         8d:3e:03:96:31:a4:53:4a:77:ab:ee:ce:63:58:b1:96:e3:c9:
         a5:cf:f6:ef:d6:4a:49:bd:c3:87:0e:6f:0d:05:bd:2c:ab:32:
         72:c4:c3:67:cb:b4:da:d6:36:3b:a7:6a:a2:76:70:7f:9a:d5:
         26:90:f8:8a:26:1e:46:b4:0a:4f:1f:77:eb:47:4d:a4:07:62:
         82:84:1e:d3:f2:81:0c:35:db:19:c4:0e:b5:a6:c7:ad:d1:61:
         fd:61:61:fa:ff:ff:20:bd:79:bd:1f:a5:2d:1e:1f:c7:52:14:
         f7:94:10:cd:47:c8:55:4e:a0:ec:72:2a:9c:fd:70:d2:6e:b4:
         fb:e2:90:4f:52:ca:fb:df:c2:44:b3:5c:15:a6:56:c9:17:a3:
         85:fb:10:e5:33:bb:83:e7:c3:ea:6f:13:31:bb:f5:5f:1b:42:
         3c:5c:6c:4d:22:97:b6:96:48:ad:56:5b:86:88:6e:69:13:c7:
         ed:6d:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:58:25 2025 by rpki-client