Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/608c7d24-3e03-38a4-b826-61d4b61d7925.roa
File:                     608c7d24-3e03-38a4-b826-61d4b61d7925.roa (raw, json)
Hash identifier:          lPgYZs4mvWyFVY3GUmZcc8zTh/UkfrL5w133MieBuNg=
Subject key identifier:   D7:FB:94:7B:BA:D5:AA:D9:1D:A0:2E:9B:2A:08:CF:72:04:56:94:CE
Certificate issuer:       /CN=22463f22-d693-439a-9b2a-254a3236fa73
Certificate serial:       010D0C9F4328584A7D15F415D097872F50776C80
Authority key identifier: CB:04:49:1C:C2:02:FA:E5:B6:98:F9:75:76:B9:1A:14:1A:DA:97:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/608c7d24-3e03-38a4-b826-61d4b61d7925.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     54039
IP address blocks:        162.220.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/22463f22-d693-439a-9b2a-254a3236fa73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/22463f22-d693-439a-9b2a-254a3236fa73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f4:15:d0:97:87:2f:50:77:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22463f22-d693-439a-9b2a-254a3236fa73
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=202b8665-b740-48e0-8cbd-df0d9d78c7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:27:4c:f9:eb:40:2a:ce:9d:68:4e:f0:0f:
                    d2:dc:66:67:bb:cf:90:d6:7f:6f:c1:5b:7d:0b:22:
                    ee:03:71:ca:ed:52:ba:72:ab:fc:69:e9:26:1a:65:
                    fa:de:55:08:e6:f3:52:59:e0:c2:36:00:d1:c7:f8:
                    bc:b1:9f:dc:b2:d6:34:7b:c6:e6:5d:04:f2:ad:2d:
                    ce:1b:5f:2f:85:da:09:52:d0:b8:49:cf:f7:73:98:
                    2e:2b:13:8a:80:52:45:eb:69:04:03:e7:83:eb:20:
                    43:cf:c0:74:be:32:c0:45:4a:d6:5c:bf:52:6a:02:
                    0e:b5:ea:0d:31:39:a7:e4:bc:dd:c8:a7:8b:5a:f3:
                    5b:43:cb:35:71:7f:fe:a7:0b:ad:82:4a:b9:6e:98:
                    00:a7:89:e0:02:50:b1:4d:55:ae:6d:7d:95:4e:04:
                    03:5c:48:7a:cc:68:83:a5:31:e5:b4:56:86:67:99:
                    60:f2:28:15:1f:9c:51:e9:84:27:7d:86:d4:fa:3b:
                    0e:35:9c:d2:39:35:aa:5b:9d:56:6c:7b:1f:89:cf:
                    5a:f5:88:50:fa:34:2d:43:87:cb:49:45:ad:35:e7:
                    1e:8a:ab:ab:1d:cf:8c:f6:6d:e5:22:64:d3:0f:1b:
                    25:be:cd:08:9e:da:a8:48:14:43:60:c9:0d:9f:80:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:94:7B:BA:D5:AA:D9:1D:A0:2E:9B:2A:08:CF:72:04:56:94:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/608c7d24-3e03-38a4-b826-61d4b61d7925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73/22463f22-d693-439a-9b2a-254a3236fa73.crl

            X509v3 Authority Key Identifier:
                keyid:CB:04:49:1C:C2:02:FA:E5:B6:98:F9:75:76:B9:1A:14:1A:DA:97:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/22463f22-d693-439a-9b2a-254a3236fa73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:e3:fa:fd:3d:c1:a1:f4:5c:eb:e8:d8:59:4b:37:87:c0:f0:
         2e:fa:f5:5b:23:8c:c2:f7:a5:92:16:c2:bc:7c:d6:41:bf:7e:
         08:d5:79:62:31:03:c2:fe:34:bf:c6:56:27:61:84:d3:17:85:
         e1:89:6b:ed:e6:c0:3c:df:51:d7:59:7d:47:3f:d4:29:4b:f3:
         12:1e:7e:04:9c:6e:58:9c:88:dd:74:0a:06:54:37:21:bd:66:
         3d:38:c6:6d:d0:89:4f:a6:20:43:6f:2f:78:24:5d:68:82:1f:
         9d:5a:71:3d:8b:d8:a7:97:80:8e:11:1d:ca:e9:73:41:fd:97:
         48:c2:c4:a0:69:b3:ce:98:a8:47:8d:20:c2:6a:de:89:0f:82:
         70:82:ad:78:aa:00:45:d9:b4:30:77:f0:95:3b:12:fc:36:2b:
         6a:37:c0:28:5a:9d:37:ff:ac:98:0b:50:79:68:b1:63:8b:fd:
         7e:6e:39:a7:54:50:13:51:9f:c2:40:db:ad:67:19:ee:2f:9a:
         bb:e4:71:99:6f:e6:8c:33:1c:27:05:4e:be:1c:c6:30:41:c5:
         0d:05:74:29:df:e0:1e:27:6b:04:7a:9c:a4:20:0d:85:bf:dd:
         fe:43:ab:db:0d:b1:41:9e:ed:fe:e3:9c:54:4b:b7:4d:f1:b1:
         23:13:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:35 2025 by rpki-client