Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
File:                     88e68d52-7beb-3da2-9dcf-f259957a2388.roa (raw, json)
Hash identifier:          0R7h63A+kJApn2v7JTuEEDZVxbvKpFZkCobn4j6rcr0=
Subject key identifier:   71:1A:70:F0:C4:54:4E:C8:36:56:7D:36:A8:0E:60:48:03:4D:56:14
Certificate issuer:       /CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
Certificate serial:       010D0C9F4328584A9FFBA31F7EF67668C9E8A3B9
Authority key identifier: E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     26292
IP address blocks:        45.73.128.0/20 maxlen: 24
                          64.30.64.0/19 maxlen: 24
                          199.180.212.0/22 maxlen: 24
                          216.49.144.0/20 maxlen: 24
                          216.195.0.0/19 maxlen: 24
                          2604:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a3:1f:7e:f6:76:68:c9:e8:a3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ca0a1e-59ff-42f0-b29b-31bf799f40ee
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=b22af9db-d609-40f8-9594-7d33d2486e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:86:f4:1a:8c:a2:a3:db:28:34:4a:d8:68:
                    df:5a:47:c7:19:2f:e3:79:0b:d5:92:28:93:f7:23:
                    1d:2b:32:36:7c:0a:1d:d2:02:de:86:2a:a2:71:39:
                    c7:58:7b:5e:93:67:5e:e4:39:e6:b3:f4:0f:b0:7b:
                    d3:2c:18:69:7d:aa:dd:e3:b9:2c:ff:38:eb:c6:77:
                    28:36:67:b7:1d:44:82:d7:bc:b4:8d:cc:39:5e:c0:
                    c8:d5:af:d8:dd:c1:56:88:b5:78:79:3b:81:48:62:
                    05:b6:81:4c:04:8d:8d:aa:b9:8e:cd:fb:ca:6f:77:
                    f0:f3:12:5f:e5:47:71:62:88:86:9a:98:66:bd:bb:
                    50:6f:cc:f3:66:5a:3a:15:5f:dd:e6:bd:1a:ad:31:
                    d8:8e:4c:8c:a8:4a:0b:fa:80:18:6d:a9:d6:0f:24:
                    08:64:e1:68:96:33:16:33:0a:95:4a:2b:d2:67:aa:
                    ea:b4:41:dc:75:91:44:64:26:8c:6b:8f:c3:93:42:
                    b8:86:13:8a:ac:9d:96:ed:5f:95:d8:4d:5b:e1:ca:
                    9e:d8:a1:0c:ad:52:97:03:db:47:0f:1a:02:4e:fe:
                    de:c1:1d:68:d2:74:50:35:bb:69:3e:02:b8:bc:c3:
                    c4:10:82:08:d0:46:34:cd:5c:be:55:09:d7:46:17:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:70:F0:C4:54:4E:C8:36:56:7D:36:A8:0E:60:48:03:4D:56:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/88e68d52-7beb-3da2-9dcf-f259957a2388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.crl

            X509v3 Authority Key Identifier:
                keyid:E0:88:C6:A5:A8:2F:41:D2:39:6E:B3:63:F3:94:25:C6:BE:81:07:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3ca0a1e-59ff-42f0-b29b-31bf799f40ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.128.0/20
                  64.30.64.0/19
                  199.180.212.0/22
                  216.49.144.0/20
                  216.195.0.0/19
                IPv6:
                  2604:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:99:d2:9a:bd:d6:aa:67:d1:3a:8e:1a:56:c4:88:53:e7:e8:
         67:bb:65:a6:0b:2a:98:40:3c:be:78:81:b7:af:75:e6:8e:14:
         7f:8b:87:dc:a1:55:c8:fb:78:d6:07:7b:a7:d6:ca:f6:b4:63:
         48:4e:1e:1f:f7:9a:02:2c:67:e0:8c:25:90:ab:44:8a:46:e0:
         9e:f1:3d:05:92:91:09:c9:74:af:57:b3:db:d0:50:73:de:91:
         35:bf:7b:84:16:8d:e6:e8:c8:fe:23:e8:9b:86:fe:bc:6e:cb:
         a2:60:c3:8c:ad:fb:6b:07:0b:86:f6:23:83:c9:05:c4:f7:0b:
         fb:34:0b:01:8e:f5:42:7d:5b:d2:54:64:c1:5e:f8:ef:1b:fb:
         04:6f:29:16:63:3b:55:58:fb:2b:5e:f1:d9:41:b0:5f:b0:3a:
         ac:4b:07:4b:14:94:2f:b3:18:2e:43:fd:e8:11:31:d7:d9:a6:
         10:b5:e4:b9:fa:af:3d:0e:0f:58:7f:ae:83:bf:6b:38:07:94:
         2a:a2:76:ad:8a:47:83:65:a1:7c:d1:0f:41:e5:dd:34:83:d5:
         79:41:eb:c1:0c:13:d7:4d:fa:18:58:dd:0d:25:2c:0e:27:26:
         36:d4:10:e0:8a:27:6f:8e:2c:18:1f:01:1b:e5:15:f3:7b:aa:
         a1:5a:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:10 2025 by rpki-client