Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa
File:                     ac787570-7438-30a0-8827-f1ac45858139.roa (raw, json)
Hash identifier:          vdkBgf7PJU/+E+bUUZVhXpmXcb3RVteHjbmVp2t6D8g=
Subject key identifier:   AB:AD:1E:D2:A8:F7:81:01:0D:4F:B6:63:4B:22:AB:00:98:EE:0F:54
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584AB220D22F9E8F6B1ED00ED200
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        144.81.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d2:2f:9e:8f:6b:1e:d0:0e:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c9614f7a-402c-45fb-9869-926a9402f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:99:5c:f2:f0:05:b2:07:75:d9:d8:5f:47:
                    d4:1d:2d:c0:ba:53:40:44:16:16:c3:0f:e6:c2:10:
                    9d:d5:26:31:c0:bf:28:cb:bd:47:36:9a:a2:43:97:
                    06:c7:e9:27:c6:2e:47:ed:a4:33:9e:01:ef:ec:6f:
                    fd:ff:37:82:fd:d6:f9:8a:7c:57:0f:28:ff:f7:41:
                    54:cb:1d:a0:20:bd:8e:fe:1f:45:b7:cf:d6:f1:02:
                    e4:d9:e8:94:60:78:cf:67:3f:a8:ba:b5:61:b1:ed:
                    3a:8c:6f:5a:26:68:bc:9b:9d:25:f2:4b:2e:4e:b2:
                    c0:de:64:c1:03:2b:22:ee:0c:20:8c:43:d3:65:12:
                    4c:9b:a6:3f:69:de:79:f8:92:b5:ad:45:96:a8:55:
                    05:fd:f3:62:d0:0f:13:77:df:8d:1d:55:20:6e:b6:
                    3b:a9:bb:f2:62:d5:ee:9f:5c:8d:21:e2:a3:2b:54:
                    1c:fd:b5:98:fc:39:7a:94:8b:bc:50:0d:43:ef:ab:
                    57:9e:dd:c6:0a:fe:5d:36:69:3c:ca:1c:64:98:31:
                    d7:52:9e:f5:08:fb:64:f6:2c:8f:e6:0f:a2:64:c7:
                    0a:0f:d2:95:ef:99:bd:ec:c9:bd:b3:80:e0:aa:10:
                    da:b5:ce:e4:aa:9f:03:52:e4:c6:fd:2b:52:e8:9d:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:1E:D2:A8:F7:81:01:0D:4F:B6:63:4B:22:AB:00:98:EE:0F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:75:b8:c9:0e:26:d0:3b:24:eb:65:54:59:0b:b7:31:4e:43:
         6f:60:7f:ad:0f:63:c5:f5:52:bf:36:9b:86:8c:a0:cf:ab:64:
         fb:5c:b4:17:99:97:ca:92:f4:55:2c:13:5e:9c:02:e3:9a:dc:
         13:dd:f6:58:c4:0e:43:01:ea:35:60:96:4f:98:46:6f:dd:e7:
         13:4f:f3:96:4e:b1:3c:dc:99:7d:8e:e6:00:bd:22:bd:8f:93:
         4a:4e:9a:2c:fd:fc:1b:e5:28:a9:6b:47:61:6a:ac:6d:ad:1e:
         61:fa:df:ce:64:5f:d8:f1:6d:7b:f7:45:75:b9:0e:a2:19:0c:
         51:8a:f1:b0:0d:ec:d2:9f:e7:be:5c:30:5a:ba:4b:e8:f3:67:
         45:e2:20:79:8d:c6:fd:90:82:bf:cd:8a:c7:aa:d8:2d:03:da:
         1e:84:60:85:a1:6c:95:c6:4e:4c:05:1d:9e:88:ed:1a:78:00:
         fd:3e:ac:8b:fe:eb:b9:b7:bf:37:60:df:ee:00:94:8d:12:93:
         52:dd:eb:6d:7f:74:52:9f:34:d4:20:e5:9a:09:bc:1c:09:77:
         3a:4d:75:7d:ca:78:58:55:53:c3:75:4e:3c:0f:16:ee:22:20:
         33:72:fc:84:22:78:67:f0:2f:4b:9d:f2:85:52:31:e5:81:f6:
         26:34:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:02 2025 by rpki-client