Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
File:                     7d8ad61a-3568-305d-b11c-06347f5b968c.roa (raw, json)
Hash identifier:          s8w6Cm+71cxKm1+yj10VC/vYN9dfM5Gje8IJ+0Qbm/E=
Subject key identifier:   84:85:C4:1D:FE:27:3A:DD:43:48:8F:1C:F4:2C:2B:D8:86:27:77:BB
Certificate issuer:       /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial:       010D0C9F4328584AA160CBC91A28D9B9B22AB180
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        209.222.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cb:c9:1a:28:d9:b9:b2:2a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a866f8ba-5518-4e16-ba2e-6ce7a8e7ff26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:f6:3c:6f:55:12:52:c0:b7:df:ae:7a:8c:
                    b0:01:fc:2b:7c:b4:2c:1a:ca:e2:1a:7c:f0:e2:4d:
                    64:aa:55:54:fb:10:5c:e6:03:e1:c1:be:67:fc:c1:
                    f0:83:04:25:bc:49:84:47:0a:5a:db:93:78:04:62:
                    ad:fe:9b:32:04:39:92:73:60:a9:eb:07:b9:af:59:
                    bf:5f:e1:95:5c:34:6d:45:c0:3f:05:3a:b7:ed:04:
                    45:88:54:9a:7f:87:03:f3:06:55:07:88:6c:26:b7:
                    b3:86:26:49:4d:be:e6:4a:a7:df:fc:d2:5e:2d:85:
                    44:15:28:a8:37:4e:8c:0a:5d:ea:95:1c:24:eb:91:
                    c3:65:71:ad:6d:98:3e:7b:7f:5b:e3:62:e1:d6:63:
                    f3:8a:e0:63:67:63:83:4b:72:a4:d2:93:74:98:3b:
                    9b:03:87:f5:2a:50:fb:b6:ea:9f:0d:84:5a:e5:d5:
                    41:1c:65:03:7c:ce:96:9e:f2:65:75:4a:f2:e7:8a:
                    65:53:f5:36:ef:ff:30:9e:40:dd:30:18:f4:30:1e:
                    44:a1:a9:7c:c9:3e:ad:15:c7:1c:ef:79:23:3a:e1:
                    c6:e4:97:15:7a:74:bd:b4:08:03:e0:20:98:c0:b6:
                    0a:aa:9c:fe:98:01:17:60:db:38:1f:26:66:a1:33:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:85:C4:1D:FE:27:3A:DD:43:48:8F:1C:F4:2C:2B:D8:86:27:77:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl

            X509v3 Authority Key Identifier:
                keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:5e:9c:c2:0f:aa:8d:4e:c9:d1:9a:0a:b1:ed:5a:57:28:
         73:00:a6:3e:9b:43:2e:44:49:ff:25:f5:77:0a:c0:1c:37:51:
         11:06:e4:06:8a:9a:07:8f:b5:8a:18:db:e7:0f:9b:48:30:07:
         65:5d:9e:e3:8b:04:36:92:50:06:44:6c:c8:3d:42:47:3d:34:
         92:b5:60:46:e0:78:4f:f3:e6:f9:22:04:1e:67:64:1c:f5:d5:
         ad:05:1f:40:62:91:a1:88:f2:e8:b8:f5:67:89:5c:6c:c8:16:
         6f:ea:88:ab:67:ee:af:1b:bc:e2:c0:32:25:15:04:5b:64:a1:
         75:44:40:3d:6a:91:a9:0d:4b:e1:0e:53:94:f0:1b:42:61:38:
         25:e2:d3:eb:3f:66:c9:4d:0d:45:6f:b2:62:3b:1a:97:0b:54:
         b5:f7:4f:7f:d1:d0:14:ce:e9:ae:bb:cf:e0:92:f9:75:34:14:
         b4:11:30:1d:1e:34:e3:a6:c9:ce:52:1c:55:3b:08:24:98:7e:
         d2:7b:d7:83:b8:6b:c6:92:4d:16:12:5c:50:c5:d0:f8:ee:c4:
         3d:e3:c2:b2:e9:fe:59:ef:48:7e:2b:ef:49:14:07:02:20:7d:
         29:84:80:a1:80:e3:65:f3:02:b7:9b:57:40:dc:6c:e2:93:db:
         e7:be:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:28:00 2025 by rpki-client