Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File:                     6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier:          fmjP+GpDUn8DWS+xNaIyAXrPsIQ8nA8A1VX6rmEK13g=
Subject key identifier:   1B:A0:3C:67:A1:33:55:A5:75:CA:F4:68:0B:70:95:0E:FC:83:40:BE
Certificate issuer:       /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial:       010D0C9F4328584AA85BB3F560C903A019160600
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     46886
IP address blocks:        104.36.252.0/22 maxlen: 32
                          104.193.128.0/22 maxlen: 32
                          158.51.192.0/22 maxlen: 32
                          165.140.16.0/22 maxlen: 32
                          170.178.140.0/22 maxlen: 32
                          2602:ffa4::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b3:f5:60:c9:03:a0:19:16:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=2f364ade-0f36-4b6b-9b21-3bf78fdfc314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:5f:fc:d1:61:2c:fb:02:6b:19:83:12:8a:
                    75:c2:9f:e8:2d:46:37:d9:68:a4:c2:8c:4d:8a:26:
                    f8:c3:3f:d9:68:d8:1a:2c:d5:5a:43:4c:c3:62:93:
                    17:e9:6c:10:51:2b:b4:5d:42:b5:0c:f5:7a:72:55:
                    94:e1:17:3b:80:92:6b:9e:6f:16:91:df:d5:b4:e0:
                    ee:d9:af:7a:8c:dc:eb:8c:a4:df:cf:cb:f2:27:ea:
                    c6:dc:fb:c3:cf:16:eb:0b:f1:00:6b:d0:5b:6e:53:
                    64:be:b2:20:b6:85:b5:59:d5:ea:f8:7c:39:99:65:
                    c8:75:1b:28:28:ed:1b:70:b1:9c:9c:94:34:98:39:
                    79:16:27:18:e5:09:ff:9a:54:c0:43:45:5a:a9:c0:
                    02:57:e6:de:ea:28:23:3f:2c:7d:f6:cb:8b:66:27:
                    f0:21:b3:cd:8c:b4:91:57:5a:b0:5f:ef:8c:19:05:
                    68:3d:9e:fb:79:0a:eb:47:b8:ab:c8:59:36:6c:f9:
                    9a:79:f2:c1:8b:d2:09:7e:29:56:03:47:d0:2f:e4:
                    f7:4c:9f:46:aa:b4:e7:b5:fc:01:b8:0a:16:6c:ff:
                    37:2a:6d:d8:9e:6c:b6:4d:5a:36:4f:3d:28:bc:5e:
                    ef:5c:df:e7:4b:fc:a8:79:a1:45:26:14:97:5a:94:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:3C:67:A1:33:55:A5:75:CA:F4:68:0B:70:95:0E:FC:83:40:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl

            X509v3 Authority Key Identifier:
                keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:64:e0:3b:2c:6d:4f:d0:05:8e:b6:7c:fe:79:d1:9e:72:1d:
         42:98:b2:7e:f5:5e:11:7d:15:d5:fe:a3:8a:db:4e:0e:8b:e5:
         0d:b1:f4:07:7b:b8:51:7b:2f:55:63:88:af:9c:64:38:16:e0:
         c3:a5:21:b8:b1:f6:1d:82:dc:df:eb:07:a1:2b:58:10:9a:45:
         61:bc:25:83:49:b9:9a:78:c2:4d:bf:84:ff:22:17:e6:f5:0a:
         8c:49:14:46:88:4f:e2:7e:03:d4:d3:b5:ea:4d:04:76:4f:54:
         8e:bc:ed:41:14:3f:25:45:79:47:3f:34:54:a1:a1:39:af:65:
         d7:0f:c3:41:56:e5:a6:b0:3a:f4:ba:2c:36:b6:b2:b3:0e:5a:
         41:25:bf:2f:28:48:52:5a:05:f4:f1:3c:f2:8f:4c:1c:7d:2f:
         ad:8b:ac:55:dd:7d:5e:a1:a1:f8:73:b2:5b:6d:ec:82:95:d0:
         d1:59:c6:3b:f2:99:80:eb:ed:1e:4a:1a:fc:7b:65:0c:6b:88:
         90:96:9f:e6:d9:bc:0e:f3:73:82:d6:6b:b0:95:ca:70:8a:11:
         d0:6e:4f:20:63:0d:b8:21:41:4f:cc:4d:8a:e4:e4:9e:00:15:
         3a:cc:6e:17:75:df:04:2c:40:39:22:14:05:e9:47:9e:e1:34:
         25:36:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:51 2025 by rpki-client