Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/175d457b-d369-341c-a572-605bf1a2b607.roa
File:                     175d457b-d369-341c-a572-605bf1a2b607.roa (raw, json)
Hash identifier:          g6uwh0R4i+JIktINOF7SzfpksJ4jsuTai3IxSyIxwb4=
Subject key identifier:   88:55:5A:A8:76:03:34:8A:E0:6D:F1:F9:9F:4F:03:8D:3B:18:11:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2215C3EF8138C93261AF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/175d457b-d369-341c-a572-605bf1a2b607.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.64.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:5c:3e:f8:13:8c:93:26:1a:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4c4c0052-6858-4a77-873b-fe5ac3249931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:f6:a6:d4:18:22:84:b6:a1:4d:2c:4d:70:
                    b2:fb:87:5b:09:3c:b2:26:69:0a:7e:6e:0c:8f:11:
                    a9:3c:8a:b7:1f:d8:5d:64:98:d7:be:9c:8b:8c:d1:
                    39:85:2a:96:7b:1d:e8:a0:cf:e3:11:98:e3:6e:cf:
                    87:75:ad:93:cd:fe:31:e5:38:fe:08:cd:ad:86:b4:
                    79:99:b4:e0:bc:4b:c6:fb:4f:27:5d:ce:c0:4d:43:
                    c1:6c:d1:99:9b:07:76:11:26:b9:ce:db:05:9b:8a:
                    1b:03:00:7c:fc:09:88:31:12:14:d8:8c:64:d2:fa:
                    4e:ee:f6:de:40:54:04:ea:82:69:d9:37:88:3a:9f:
                    2e:92:99:a1:d6:83:11:3e:fe:6c:31:0b:e0:73:b7:
                    a1:7e:c6:ac:1d:44:88:80:4e:1a:66:c1:94:91:40:
                    07:4a:47:b0:71:1c:6a:a8:a2:cd:98:b8:6b:fa:fc:
                    8b:16:49:3d:87:02:db:01:63:70:bd:95:f1:e5:39:
                    45:4a:c2:62:a6:0c:5c:65:86:fa:73:45:a6:9c:2b:
                    a0:4b:0b:18:a5:6c:69:e8:d4:4d:db:1b:cb:c1:df:
                    05:47:ef:c9:2e:60:92:99:e3:d7:2c:f8:cd:e3:c9:
                    c0:8e:a8:50:da:6b:d9:d4:78:24:25:7b:42:c5:ef:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:5A:A8:76:03:34:8A:E0:6D:F1:F9:9F:4F:03:8D:3B:18:11:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/175d457b-d369-341c-a572-605bf1a2b607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:d9:c9:ac:75:1c:a8:d3:58:1c:b9:13:be:b0:2f:8b:0e:
         21:ff:27:98:d8:76:04:74:9b:de:4c:1e:08:b2:7f:88:63:7f:
         40:bd:69:b5:48:47:de:65:be:0b:4c:e7:5d:6c:85:aa:49:31:
         dd:72:a5:20:e6:13:48:f6:c6:6b:46:27:13:2b:d1:46:c1:4a:
         10:49:27:74:3c:a0:8d:06:30:18:ad:ab:35:3f:2c:4b:2f:82:
         1f:63:6b:ce:12:bc:1a:c6:b0:e2:82:e6:40:ee:a3:6d:25:50:
         d4:7d:37:97:62:b4:8b:19:31:57:e2:e0:14:85:16:66:ab:4c:
         b8:1e:7b:d7:d5:76:0d:73:7b:21:00:87:d5:e8:6b:98:3d:6a:
         ef:ba:9f:36:85:a3:8c:58:76:4c:b0:67:ab:21:9d:cc:38:11:
         c2:79:04:53:c5:09:26:b5:ba:d2:75:5f:5b:02:cc:ea:e5:37:
         a0:5f:51:25:f6:e8:ee:16:0b:7d:61:61:fb:a9:8a:0d:ff:56:
         bc:c8:a6:bd:c9:e1:7b:77:c5:19:f7:33:96:25:dc:c9:26:c8:
         04:b4:51:e8:64:87:1b:6e:60:de:cf:cc:7e:81:56:24:84:8e:
         6e:ea:ec:39:06:56:d6:c0:01:66:c0:c8:25:b7:26:48:36:0d:
         71:fb:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:34:41 2025 by rpki-client