Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa
File:                     7e320789-f385-3727-9e84-7ca91a7f9608.roa (raw, json)
Hash identifier:          tjDXerEML0wpZ/c3ZMsals70lcVypE+l2PbjwWz/rRw=
Subject key identifier:   BA:CD:33:68:DA:5E:F2:5A:C5:B8:4C:0E:BF:66:66:D3:9B:FD:21:EA
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584A94D0DAC186AB32C040D97F80
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     35847
IP address blocks:        168.93.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:da:c1:86:ab:32:c0:40:d9:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=44e8b7f6-d93b-4e2c-a96e-6bfd07944ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:b8:3d:e7:c4:02:4a:3e:28:70:cd:5e:af:
                    31:9b:05:2c:fc:08:09:32:54:ec:95:cd:48:ca:6b:
                    58:6a:d6:87:5a:5b:fd:59:d5:88:73:77:ad:74:0f:
                    5a:78:dc:4b:17:5a:81:05:25:76:6d:b3:f3:bd:7e:
                    25:76:40:58:08:f6:72:6d:7d:d1:36:0f:5e:c5:be:
                    3f:11:89:2b:8e:e1:93:9f:8b:e5:5f:5d:99:c1:76:
                    fe:09:3b:c7:fa:97:64:1b:d9:86:69:3d:10:de:cc:
                    35:1a:b0:31:c1:0b:59:02:cf:68:e9:60:9c:64:aa:
                    76:8f:b5:68:1d:48:5a:7e:7c:a8:44:eb:c5:cd:15:
                    d8:7a:c9:a6:e7:0f:02:b3:5e:73:a6:42:46:ff:07:
                    aa:3d:06:39:37:49:c8:34:a9:5e:c8:d7:b1:6c:10:
                    1a:48:12:06:ec:2b:d6:dc:3b:2c:73:29:32:ec:26:
                    c5:76:e9:9f:7c:10:91:59:7d:a3:04:97:7d:3a:3b:
                    e8:f7:86:d8:af:fe:4d:0e:63:c5:03:0d:f2:3a:d0:
                    d3:8e:4d:85:5c:88:a0:aa:49:9e:92:28:78:d7:a1:
                    ca:bb:f7:d7:62:6c:53:ef:20:ce:19:70:8c:71:48:
                    e4:0d:ae:72:26:8c:d5:6f:14:00:84:9f:96:47:88:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:33:68:DA:5E:F2:5A:C5:B8:4C:0E:BF:66:66:D3:9B:FD:21:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:2d:fe:a8:31:e2:7e:0e:20:88:a5:bd:f1:b2:c6:58:de:
         a3:c0:f1:d0:c2:ce:4a:4c:39:62:d3:ce:f8:48:a0:08:35:15:
         22:e3:23:f1:bb:16:7b:0f:c5:ca:9f:6f:a4:13:f4:13:a0:9c:
         03:6d:38:9f:6c:54:3e:1c:31:74:f6:5e:6f:a5:7d:33:c9:86:
         19:c1:7e:c9:a1:03:1a:2a:d9:7a:47:99:47:52:22:0a:6a:0c:
         c4:eb:79:6f:e5:77:91:02:77:45:ba:a8:9f:bf:6d:e6:b6:f3:
         8b:5b:c4:a9:dc:99:f3:70:0e:92:2b:d3:da:80:21:82:9a:5a:
         5a:62:81:50:b3:6e:db:2b:f6:c9:ae:b6:16:7f:b4:79:c9:e6:
         e3:93:29:ad:e0:60:27:de:c7:0c:4b:fa:4d:49:87:5a:84:f6:
         5c:d5:dd:c3:d2:0d:20:20:dc:5f:75:97:3f:d3:f2:ec:6c:03:
         c2:43:dd:6f:f4:81:eb:d1:74:5b:2a:76:83:74:7b:3f:a2:67:
         8a:bb:2f:39:80:0f:16:f5:2b:00:eb:bc:74:6b:39:2b:a5:8f:
         f9:fa:37:11:2c:2c:32:8b:93:46:57:19:2b:f1:af:d1:17:ee:
         9c:dd:f1:61:d6:4b:41:69:e3:2a:b4:a7:88:32:ad:1d:58:2f:
         86:4d:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:02 2025 by rpki-client